[checkmk-commits] [Checkmk/checkmk] 48fd7f: Reland "preparations for non-self-signed certifica...

Branch: refs/heads/master Home: https://github.com/Checkmk/checkmk Commit: 48fd7f50cacc2855b8c1c14d4942af50852eec16 https://github.com/Checkmk/checkmk/commit/48fd7f50cacc2855b8c1c14d4942af508… Author: Hannes Rantzsch <hannes.rantzsch(a)checkmk.com> Date: 2023-10-27 (Fri, 27 Oct 2023) Changed paths: M cmk/utils/crypto/certificate.py M tests/testlib/certs.py M tests/unit/cmk/utils/crypto/test_certificate.py Log Message: ----------- Reland "preparations for non-self-signed certificates" This relands commit 8eb16da12741920e88203f4a59e590e37179f0b9 with fixes. Change-Id: I0e2cd52fa8dc558992035de1c72d31a5b511ca97 Commit: a890abfe5baf4c24c91525bb9c61f57955b87249 https://github.com/Checkmk/checkmk/commit/a890abfe5baf4c24c91525bb9c61f5795… Author: Hannes Rantzsch <hannes.rantzsch(a)checkmk.com> Date: 2023-10-27 (Fri, 27 Oct 2023) Changed paths: M cmk/utils/certs.py M tests/testlib/certs.py M tests/unit/cmk/utils/test_certs.py Log Message: ----------- Fix: RootCA signs CSRs in own name, not issuer Our RootCA mistakenly used the name of its own issuer as the issuer when processing CSRs. This went unnoticed and didn't cause issues only because our RootCA is always its own issuer, so the names were identical. It now uses its subject attribute. Change-Id: I44b00ad3a822c177206a6fc5f4aa8909d1f56529 Compare: https://github.com/Checkmk/checkmk/compare/89153a0a095f...a890abfe5baf