Fraser Tweedale 852618fd65 csrgen: fix when attribute shortname is lower case ...

OpenSSL requires attribute short names ("CN", "O", etc) to be in
upper case, otherwise it fails to add the attribute.  This can be
triggered when FreeIPA has been installed with --subject-base
containing a lower-case attribute shortname (e.g.
--subject-base="o=Red Hat").

Explicitly convert the attribute type string to an OID
(ASN1_OBJECT *).  If that fails, upper-case the type string and try
again.

Add some tests for the required behaviour.

Fixes: https://pagure.io/freeipa/issue/7496
Reviewed-By: Christian Heimes <cheimes@redhat.com>

2018-04-25 14:41:12 +02:00

..

data/test_csrgen

csrgen: Change to pure openssl config format (no script)

2017-04-03 07:46:30 +00:00

__init__.py

tests: Add tests for CSR autogeneration

2017-01-31 10:20:28 +01:00

test_csrgen.py

csrgen: fix when attribute shortname is lower case

2018-04-25 14:41:12 +02:00