cmueller/ansible
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity
43463 commits 47 branches 390 tags 440 MiB
Commit graph

7 commits

Author SHA1 Message Date
Felix Fontein
caf7fd2245 openssl_*: improve passphrase handling for private keys in PyOpenSSL (#53489) 
* Raise OpenSSLBadPassphraseError if passphrase is wrong.

* Improve handling of passphrase errors.

Current behavior for modules is: if passphrase is wrong (or wrongly specified), fail.
Current behavior for openssl_privatekey is: if passphrase is worng (or wrongly specified), regenerate.

* Add changelog.

* Add tests.

* Adjustments for some versions of PyOpenSSL.

* Update lib/ansible/modules/crypto/openssl_certificate.py

Improve text.

Co-Authored-By: felixfontein <felix@fontein.de>
 2019-03-08 16:21:18 +00:00
Felix Fontein
b2e992cecd openssl_csr: improve subject validation (#53198) 
* Improve subject field validation.

* Add country name idempotency test.

* Add failed country name test.

* Add changelog.
 2019-03-07 15:29:35 +00:00
Felix Fontein
628326b879 openssl_csr: improve invalid SAN error messages (#53201) 
* Improve invalid SAN error messages.

* Add changelog.
 2019-03-05 16:07:07 +00:00
Felix Fontein
9b1cbcf3a4 openssl_csr: ignore empty strings in altnames (#51473) 
* Ignore empty strings in altnames.

* Add changelog.

* Add idempotence check without SAN.

* Fix bug in cryptography backend.
 2019-02-11 10:30:56 +00:00
Felix Fontein
345011e024 openssl_csr cryptography backend, try II (#50894) 
* Revert "Revert "openssl_csr: Allow to use cryptography as backend (#50324)""

This reverts commit bbd2e31e9f.

* Remove more complicated selection copy'n'pasted from openssl_privatekey.

* Add tests for backend selection.

* Add openssl_csr test for arbitrary string commonName.

* Allow to disable commonName -> SAN copying (fixes #36690).
 2019-01-21 17:19:05 +00:00
Felix Fontein
bbd2e31e9f Revert "openssl_csr: Allow to use cryptography as backend (#50324)" 
This reverts commit 409f8a15bd.
 2019-01-14 09:10:38 -08:00
Felix Fontein
409f8a15bd openssl_csr: Allow to use cryptography as backend (#50324) 
* Allow to use cryptography as backend for openssl_csr.

* Use different curve.

* Adding changelog.

Includes changelog fragment for #49416, which didn't include one.
 2019-01-14 13:33:51 +00:00