luxolus/open-vault
2
0
Fork 0
Code Issues 1 Pull requests Releases Activity

Fix alias data being used for cert auth (serial number -> common name) (#4495)

Browse source 
Fixes #4475
This commit is contained in:
Jeff Mitchell 2018-05-04 10:08:23 -04:00 committed by GitHub
parent 9b9be9622a
commit b1d44a7dee
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 2 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
builtin/credential/cert/path_login.go
View file

@ -90,6 +90,7 @@ func (b *backend) pathLogin(ctx context.Context, req *logical.Request, data *fra
Metadata: map[string]string{
"cert_name": matched.Entry.Name,
"common_name": clientCerts[0].Subject.CommonName,
"serial_number": clientCerts[0].SerialNumber.String(),
"subject_key_id": certutil.GetHexFormatted(clientCerts[0].SubjectKeyId, ":"),
"authority_key_id": certutil.GetHexFormatted(clientCerts[0].AuthorityKeyId, ":"),
},
@ -99,7 +100,7 @@ func (b *backend) pathLogin(ctx context.Context, req *logical.Request, data *fra
MaxTTL: matched.Entry.MaxTTL,
},
Alias: &logical.Alias{
Name: clientCerts[0].SerialNumber.String(),
Name: clientCerts[0].Subject.CommonName,
},
},
}