Add warning for ASN.1 encoded extension values returned by some modules (#318)

* Add warning that ASN.1 encoded extension values returned by some modules might not reflect the exact byte sequence in the source file anymore depending on the cryptography version.

* Apply suggestions from code review

Co-authored-by: Ajpantuso <ajpantuso@gmail.com>

Co-authored-by: Ajpantuso <ajpantuso@gmail.com>
This commit is contained in:
Felix Fontein
2021-10-31 14:34:33 +01:00
committed by GitHub
parent 4ab2ed8b77
commit ecbd44df22
4 changed files with 27 additions and 3 deletions

View File

@@ -0,0 +1,6 @@
breaking_changes:
- "get_certificate, openssl_csr_info, x509_certificate_info - depending on the ``cryptography`` version used,
the modules might not return the ASN.1 value for an extension as contained in the certificate respectively CSR,
but a re-encoded version of it. This should usually be identical to the value contained in the source file,
unless the value was malformed. For extensions not handled by C(cryptography) the value contained in
the source file is always returned unaltered (https://github.com/ansible-collections/community.crypto/pull/318)."