Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Don't use x509 common names #1246

Merged
merged 1 commit into from
May 6, 2021
Merged

Don't use x509 common names #1246

merged 1 commit into from
May 6, 2021

Conversation

johnSchnake
Copy link
Contributor

@johnSchnake johnSchnake commented May 6, 2021

Use Subject Alternate Names fields instead.

Fixes: #1227

Signed-off-by: John Schnake [email protected]

Use Subject Alternate Names fields instead.

Fixes: #1227

Signed-off-by: John Schnake <[email protected]>
@johnSchnake johnSchnake changed the title WIP Don't use x509 common names May 6, 2021
@johnSchnake johnSchnake requested a review from wilsonehusin May 6, 2021 02:02
@johnSchnake
Copy link
Contributor Author

FYI I just tried to remove the circleci integeation since I moved us to github actions; thats the only test failing.

@johnSchnake johnSchnake marked this pull request as ready for review May 6, 2021 11:47
@johnSchnake
Copy link
Contributor Author

I don't have a great understanding of the spec but just tried to swap out which field we used. Seems to be sufficient? I am only surprised since it worked on my first try :)

@wilsonehusin
Copy link
Contributor

lol i recently did this and didn't even realize this is the fix we need in Sonobuoy 😆
https://github.com/wilsonehusin/confiar/blob/b91d2a4d8296afb7f23074bf59a3c05f88ff745c/internal/cryptographer/gostd.go#L85

thanks John!

@johnSchnake johnSchnake merged commit 4573667 into vmware-tanzu:master May 6, 2021
@johnSchnake johnSchnake deleted the cacert branch May 6, 2021 18:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

go1.17 deprecates GODEBUG=x509ignoreCN=0
2 participants