internet/community.general
3
0
Fork 0
mirror of https://github.com/ansible-collections/community.general.git synced 2026-05-08 06:12:51 +00:00
Code Issues Packages Projects Releases Wiki Activity

openssl_csr: improve invalid SAN error messages (#53201)

Browse Source 
* Improve invalid SAN error messages.

* Add changelog.
This commit is contained in:
Felix Fontein
2019-03-05 17:07:07 +01:00
committed by John R Barker
parent af6e4cc75b
commit 628326b879
4 changed files with 25 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
lib/ansible/modules/crypto/openssl_csr.py
View File

@@ -489,7 +489,14 @@ class CertificateSigningRequestPyOpenSSL(CertificateSigningRequestBase):
extensions = []
if self.subjectAltName:
altnames = ', '.join(self.subjectAltName)
extensions.append(crypto.X509Extension(b"subjectAltName", self.subjectAltName_critical, altnames.encode('ascii')))
try:
extensions.append(crypto.X509Extension(b"subjectAltName", self.subjectAltName_critical, altnames.encode('ascii')))
except OpenSSL.crypto.Error as e:
raise CertificateSigningRequestError(
'Error while parsing Subject Alternative Names {0} (check for missing type prefix, such as "DNS:"!): {1}'.format(
', '.join(["{0}".format(san) for san in self.subjectAltName]), str(e)
)
)
if self.keyUsage:
usages = ', '.join(self.keyUsage)