ad3a093b40
* Fix interoperability concerns with PSS When Go parses a certificate with rsaPSS OID, it will accept this certificate but not parse the SubjectPublicKeyInfo, leaving the PublicKeyAlgorithm and PublicKey fields blank, but otherwise not erring. The same behavior occurs with rsaPSS OID CSRs. On the other hand, when Go parses rsaPSS OID PKCS8 private keys, these keys will fail to parse completely. Thus, detect and fail on any empty PublicKey certs and CSRs, warning the user that we cannot parse these correctly and thus refuse to operate. Signed-off-by: Alexander Scheel <alex.scheel@hashicorp.com> * Run more PKI tests in parallel Signed-off-by: Alexander Scheel <alex.scheel@hashicorp.com> * Add notes about PSS shortcomings to considerations Signed-off-by: Alexander Scheel <alex.scheel@hashicorp.com> Signed-off-by: Alexander Scheel <alex.scheel@hashicorp.com> |
||
|---|---|---|
| .. | ||
| aws | ||
| cassandra | ||
| consul | ||
| database | ||
| mongodb | ||
| mssql | ||
| mysql | ||
| nomad | ||
| pki | ||
| postgresql | ||
| rabbitmq | ||
| ssh | ||
| totp | ||
| transit | ||