open-vault/builtin/logical
Alexander Scheel 7781b037da
Validate identifiers against role when creating order (#20410)
* Validate identifiers against role when creating order

Perform some initial validation against the order's requested
identifiers during creation; this gives a client a heads up that their
request might be rejected by the server before they have to solve
challenges for these, only to find out during CSR submission time that
there is no way to request the specified certificate.

Co-authored-by: Steven Clark <steven.clark@hashicorp.com>
Signed-off-by: Alexander Scheel <alex.scheel@hashicorp.com>

* Add unit tests and switch errors to ErrRejectedIdentifier

 - Change the error messages from validating identifiers against the
   role to ErrRejectedIdentifier errors if they do occur
 - Add unit tests to validate that we validate against the various
   roles somewhat okay.

* go doc

* Fix typo in test godoc

---------

Signed-off-by: Alexander Scheel <alex.scheel@hashicorp.com>
Co-authored-by: Steven Clark <steven.clark@hashicorp.com>
2023-04-28 19:21:26 +00:00
..
aws secrets/aws: fix acc test for sts (#20408) 2023-04-27 21:40:45 +00:00
consul openapi: Add display attributes for Consul (#19413) 2023-04-13 11:31:37 -04:00
database openapi: Add display attributes for database plugin (#19414) 2023-04-10 14:22:02 -04:00
nomad Add support for docker testclusters (#20247) 2023-04-24 14:25:50 -04:00
pki Validate identifiers against role when creating order (#20410) 2023-04-28 19:21:26 +00:00
pkiext Integrate acme config enable/disable into tests (#20407) 2023-04-27 20:31:13 +00:00
rabbitmq Add support for docker testclusters (#20247) 2023-04-24 14:25:50 -04:00
ssh Add support for docker testclusters (#20247) 2023-04-24 14:25:50 -04:00
totp openapi: Add display attributes for TOTP plugin (#19544) 2023-04-10 13:32:15 -04:00
transit openapi: Add display attributes for transit plugin (#19575) 2023-04-10 14:20:53 -04:00