4 Commits

Author	SHA1	Message	Date
Fraser Tweedale	852618fd65	csrgen: fix when attribute shortname is lower case ... OpenSSL requires attribute short names ("CN", "O", etc) to be in upper case, otherwise it fails to add the attribute. This can be triggered when FreeIPA has been installed with --subject-base containing a lower-case attribute shortname (e.g. --subject-base="o=Red Hat"). Explicitly convert the attribute type string to an OID (ASN1_OBJECT *). If that fails, upper-case the type string and try again. Add some tests for the required behaviour. Fixes: https://pagure.io/freeipa/issue/7496 Reviewed-By: Christian Heimes <cheimes@redhat.com>	2018-04-25 14:41:12 +02:00
Ben Lipton	136c6c3e2a	csrgen: Change to pure openssl config format (no script) ... https://pagure.io/freeipa/issue/4899 Reviewed-By: Jan Cholasta <jcholast@redhat.com>	2017-04-03 07:46:30 +00:00
Ben Lipton	5420e9cfbe	csrgen: Remove helper abstraction ... All requests now use the OpenSSL formatter. However, we keep Formatter a separate class so that it can be changed out for tests. https://pagure.io/freeipa/issue/4899 Reviewed-By: Jan Cholasta <jcholast@redhat.com>	2017-04-03 07:46:30 +00:00
Ben Lipton	a26cf0d791	tests: Add tests for CSR autogeneration ... This patch also contains some code changes to make the code easier to test and to make the tests pass. https://fedorahosted.org/freeipa/ticket/4899 Reviewed-By: Jan Cholasta <jcholast@redhat.com>	2017-01-31 10:20:28 +01:00