Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

make sure pki IDs are unique #1611

Merged
merged 1 commit into from
Aug 1, 2022
Merged

make sure pki IDs are unique #1611

merged 1 commit into from
Aug 1, 2022

Conversation

eikenb
Copy link
Contributor

@eikenb eikenb commented Aug 1, 2022

This was a classic cut-n-paste error. The PKI code was based on the
existing vault_read.go 'secret' code and missed the fact that the ID of
the pkiCert will be identical for all certs pulled form the same PKI
role path.

The fix will be to adjust the ID to be composed of the pki role path +
the destination path. That should be unique per use case as the
destination path must be unique per Cert.

Fixes #1607

@eikenb eikenb added the bug label Aug 1, 2022
@eikenb eikenb added this to the v0.29.2 milestone Aug 1, 2022
@eikenb eikenb requested a review from a team August 1, 2022 20:33
This was a classic cut-n-paste error. The PKI code was based on the
existing vault_read.go 'secret' code and missed the fact that the ID of
the pkiCert will be identical for all certs pulled form the same PKI
role path.

The fix will be to adjust the ID to be composed of the pki role path
+ the destination path. That should be unique per use case as the
destination path must be unique per Cert.
@eikenb eikenb force-pushed the issue-1607-pki-cert-unique-ids branch from 7965a3c to 02774d9 Compare August 1, 2022 21:28
@eikenb eikenb added the hashicat-update-required Changes that need to be ported to hashicat label Aug 1, 2022
@eikenb eikenb merged commit bbfd5fe into main Aug 1, 2022
@eikenb eikenb deleted the issue-1607-pki-cert-unique-ids branch August 1, 2022 22:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug hashicat-update-required Changes that need to be ported to hashicat
Projects
None yet
Development

Successfully merging this pull request may close these issues.

pkiCert provies wrong certificate if two certificates with different common_name are requested
1 participant