Commit - freeipa - 3c354e74f389da6bfd8f444a58cf3900fdf97434

    Verify external CA's basic constraint pathlen
    
    IPA no verifies that intermediate certs of external CAs have a basic
    constraint path len of at least 1 and increasing.
    
    Fixes: https://pagure.io/freeipa/issue/7877
    Signed-off-by: Christian Heimes <cheimes@redhat.com>
    Reviewed-By: Fraser Tweedale <ftweedal@redhat.com>
    Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>

ipapython/certdb.py

file modified

+13 -1

ipaserver/install/installutils.py

file modified

+10 -4

ipatests/create_external_ca.py

file modified

+2 -2

ipatests/prci_definitions/nightly_f28.yaml

file modified

+1 -1

ipatests/prci_definitions/nightly_master.yaml

file modified

+1 -1

ipatests/prci_definitions/nightly_rawhide.yaml

file modified

+1 -1

ipatests/pytest_ipa/integration/tasks.py

file modified

+5 -4

ipatests/test_integration/test_external_ca.py

file modified

+19 -2

ndehadrai / freeipa

Source Code

3c354e7 Verify external CA's basic constraint pathlen

Authored and Committed by cheimes 5 years ago

`3c354e7` Verify external CA's basic constraint pathlen