luxolus/open-vault
2
0
Fork 0
Code Issues 1 Pull requests Releases Activity
open-vault/builtin/logical/pkiext
History
Alexander Scheel b204e51263
ACME tests for Intermediate CA issuance prevention (#20633) 
* Do not set use_csr_values when issuing ACME certs

Signed-off-by: Alexander Scheel <alex.scheel@hashicorp.com>

* Ensure CSRs with Basic Constraints are rejected

Signed-off-by: Alexander Scheel <alex.scheel@hashicorp.com>

* Add test to ensure CA certificates cannot be issued

Signed-off-by: Alexander Scheel <alex.scheel@hashicorp.com>

* Update builtin/logical/pkiext/pkiext_binary/acme_test.go

Co-authored-by: Steven Clark <steven.clark@hashicorp.com>

* Update builtin/logical/pkiext/pkiext_binary/acme_test.go

Co-authored-by: Steven Clark <steven.clark@hashicorp.com>

* Update acme_test.go to include certutil

* Update acme_test.go - unused imports, reformat

* Update acme_test.go - hex really was used

This is why I can't use the GH web editor. :-)

---------

Signed-off-by: Alexander Scheel <alex.scheel@hashicorp.com>
Co-authored-by: Steven Clark <steven.clark@hashicorp.com>
2023-05-17 19:54:37 +00:00
..
pkiext_binary ACME tests for Intermediate CA issuance prevention (#20633) 2023-05-17 19:54:37 +00:00
nginx_test.go Add support for docker testclusters (#20247) 2023-04-24 14:25:50 -04:00
README.md Move pki docker tests to pkiext (#17928) 2022-11-14 18:26:26 -05:00
test_helpers.go Use a dedicated runner for the binary-based tests. (#20377) 2023-04-27 09:41:49 -04:00
zlint_test.go Add support for docker testclusters (#20247) 2023-04-24 14:25:50 -04:00

README.md

What is pkiext?

pkiext exists to split the Docker tests into a separate package from the main PKI tests. Because the Docker tests execute in a smaller runner with fewer resources, and we were hitting timeouts waiting for the entire PKI test suite to run, we need to split the larger non-Docker PKI tests from the smaller Docker tests, to ensure the former can execute.

This package should lack any non-test related targets.