cmueller/ansible
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity
45625 commits 47 branches 390 tags 440 MiB
Commit graph

11 commits

Author SHA1 Message Date
Felix Fontein
7a957ba64a openssl_certificate: fix passphrase handling for cryptography backend (#56155) 
* Make sure passphrase is bytes string.

* Fix typo.

* Add more passphrase tests.

* Fix test names.

* Add changelog.
 2019-05-07 23:58:15 -04:00
Felix Fontein
cb5c57bcd5 openssl_csr: fix idempotency problems (#55142) 
* Add test for generating a CSR with everything, and testing idempotency.

* Proper SAN normalization before comparison.

* Fix check in cryptography backend.

* Convert SANs to text. Update comments.

* Add changelog.
 2019-04-15 09:15:08 +02:00
Felix Fontein
188903448a openssl_*: add backup option (#54294) 2019-03-30 15:38:43 +01:00
Felix Fontein
90c067e947 openssl_* modules: private key errors (#54088) 
* Improve error handling, in particular with respect to private key loading problems.

* Add tests to validate that modules regenerate invalid input and don't crash.

* Don't crash when input is invalid.

* Create 'better' broken input.

* Fix paths.

* Simplifying pyOpenSSL error handling.
 2019-03-30 14:28:10 +01:00
Felix Fontein
caf7fd2245 openssl_*: improve passphrase handling for private keys in PyOpenSSL (#53489) 
* Raise OpenSSLBadPassphraseError if passphrase is wrong.

* Improve handling of passphrase errors.

Current behavior for modules is: if passphrase is wrong (or wrongly specified), fail.
Current behavior for openssl_privatekey is: if passphrase is worng (or wrongly specified), regenerate.

* Add changelog.

* Add tests.

* Adjustments for some versions of PyOpenSSL.

* Update lib/ansible/modules/crypto/openssl_certificate.py

Improve text.

Co-Authored-By: felixfontein <felix@fontein.de>
 2019-03-08 16:21:18 +00:00
Felix Fontein
b2e992cecd openssl_csr: improve subject validation (#53198) 
* Improve subject field validation.

* Add country name idempotency test.

* Add failed country name test.

* Add changelog.
 2019-03-07 15:29:35 +00:00
Felix Fontein
628326b879 openssl_csr: improve invalid SAN error messages (#53201) 
* Improve invalid SAN error messages.

* Add changelog.
 2019-03-05 16:07:07 +00:00
Felix Fontein
9b1cbcf3a4 openssl_csr: ignore empty strings in altnames (#51473) 
* Ignore empty strings in altnames.

* Add changelog.

* Add idempotence check without SAN.

* Fix bug in cryptography backend.
 2019-02-11 10:30:56 +00:00
Felix Fontein
345011e024 openssl_csr cryptography backend, try II (#50894) 
* Revert "Revert "openssl_csr: Allow to use cryptography as backend (#50324)""

This reverts commit bbd2e31e9f.

* Remove more complicated selection copy'n'pasted from openssl_privatekey.

* Add tests for backend selection.

* Add openssl_csr test for arbitrary string commonName.

* Allow to disable commonName -> SAN copying (fixes #36690).
 2019-01-21 17:19:05 +00:00
Felix Fontein
bbd2e31e9f Revert "openssl_csr: Allow to use cryptography as backend (#50324)" 
This reverts commit 409f8a15bd.
 2019-01-14 09:10:38 -08:00
Felix Fontein
409f8a15bd openssl_csr: Allow to use cryptography as backend (#50324) 
* Allow to use cryptography as backend for openssl_csr.

* Use different curve.

* Adding changelog.

Includes changelog fragment for #49416, which didn't include one.
 2019-01-14 13:33:51 +00:00