Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

auth/cert: Add certificate extensions as metadata #13348

Merged
merged 2 commits into from
Jan 3, 2022

Conversation

peterverraedt
Copy link
Contributor

This adds certificate extensions as metadata to be used in vault policy templates. We parse the ASN1 objectidentifiers to a string separated by dashes instead of dots, to ease the use in golang templating language.

Fixes: #13347

Refs: #10503

Signed-off-by: Peter Verraedt peter.verraedt@kuleuven.be

@vercel vercel bot temporarily deployed to Preview – vault December 6, 2021 14:22 Inactive
@vercel vercel bot temporarily deployed to Preview – vault-storybook December 6, 2021 14:22 Inactive
@vercel vercel bot temporarily deployed to Preview – vault-storybook December 6, 2021 15:07 Inactive
@vercel vercel bot temporarily deployed to Preview – vault December 6, 2021 15:07 Inactive
peterverraedt added a commit to peterverraedt/vault that referenced this pull request Dec 7, 2021
Signed-off-by: Peter Verraedt <peter.verraedt@kuleuven.be>
@vercel vercel bot temporarily deployed to Preview – vault December 7, 2021 07:14 Inactive
@vercel vercel bot temporarily deployed to Preview – vault-storybook December 7, 2021 07:14 Inactive
peterverraedt added a commit to peterverraedt/vault that referenced this pull request Dec 16, 2021
Signed-off-by: Peter Verraedt <peter.verraedt@kuleuven.be>
@vercel vercel bot temporarily deployed to Preview – vault-storybook December 16, 2021 10:14 Inactive
peterverraedt added a commit to peterverraedt/vault that referenced this pull request Dec 16, 2021
Signed-off-by: Peter Verraedt <peter.verraedt@kuleuven.be>
@vercel vercel bot temporarily deployed to Preview – vault-storybook December 16, 2021 11:14 Inactive
@pmmukh
Copy link
Contributor

pmmukh commented Dec 20, 2021

Hey @peterverraedt ! Sorry for the delay here, I've been caught up with other stuff but I'll be sure to review this PR this week, and thanks for the prompt response to the feedback we gave!

Copy link
Contributor

@pmmukh pmmukh left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Some comments / questions, overall the PR looks pretty great! :)

builtin/credential/cert/backend_test.go Outdated Show resolved Hide resolved
builtin/credential/cert/path_certs.go Outdated Show resolved Hide resolved
builtin/credential/cert/path_login.go Outdated Show resolved Hide resolved
builtin/credential/cert/path_login.go Outdated Show resolved Hide resolved
builtin/credential/cert/path_login.go Outdated Show resolved Hide resolved
builtin/credential/cert/path_login.go Outdated Show resolved Hide resolved
peterverraedt added a commit to peterverraedt/vault that referenced this pull request Dec 24, 2021
Signed-off-by: Peter Verraedt <peter.verraedt@kuleuven.be>
@vercel vercel bot temporarily deployed to Preview – vault-storybook December 24, 2021 14:32 Inactive
Copy link
Contributor

@pmmukh pmmukh left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

couple minor nits, olgtm!

changelog/13348.txt Outdated Show resolved Hide resolved
builtin/credential/cert/path_certs.go Show resolved Hide resolved
@pmmukh
Copy link
Contributor

pmmukh commented Jan 3, 2022

Also, could you please rebase this branch off main ? There's some test failures that should be fixed in main now.

peterverraedt added a commit to peterverraedt/vault that referenced this pull request Jan 3, 2022
Signed-off-by: Peter Verraedt <peter.verraedt@kuleuven.be>
@vercel vercel bot temporarily deployed to Preview – vault-storybook January 3, 2022 18:42 Inactive
Signed-off-by: Peter Verraedt <peter.verraedt@kuleuven.be>
Signed-off-by: Peter Verraedt <peter.verraedt@kuleuven.be>
@vercel vercel bot temporarily deployed to Preview – vault-storybook January 3, 2022 19:28 Inactive
@pmmukh pmmukh merged commit 9ec3043 into hashicorp:main Jan 3, 2022
heppu pushed a commit to heppu/vault that referenced this pull request Jan 13, 2022
* auth/cert: Add certificate extensions as metadata

Signed-off-by: Peter Verraedt <peter.verraedt@kuleuven.be>

* Add changelog for hashicorp#13348

Signed-off-by: Peter Verraedt <peter.verraedt@kuleuven.be>
joatmon08 pushed a commit that referenced this pull request Jan 25, 2022
* auth/cert: Add certificate extensions as metadata

Signed-off-by: Peter Verraedt <peter.verraedt@kuleuven.be>

* Add changelog for #13348

Signed-off-by: Peter Verraedt <peter.verraedt@kuleuven.be>
qk4l pushed a commit to qk4l/vault that referenced this pull request Feb 4, 2022
* auth/cert: Add certificate extensions as metadata

Signed-off-by: Peter Verraedt <peter.verraedt@kuleuven.be>

* Add changelog for hashicorp#13348

Signed-off-by: Peter Verraedt <peter.verraedt@kuleuven.be>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Add certificate extensions as metadata
2 participants