[checkmk-commits] [Checkmk/checkmk] 74245a: Allow non-RSA keys in certificates

Branch: refs/heads/master Home: https://github.com/Checkmk/checkmk Commit: 74245a5ec4cd35e26e786d05fc2a0927063084cd https://github.com/Checkmk/checkmk/commit/74245a5ec4cd35e26e786d05fc2a09270… Author: Hannes Rantzsch <hannes.rantzsch(a)checkmk.com> Date: 2023-11-27 (Mon, 27 Nov 2023) Changed paths: M cmk/gui/key_mgmt.py M cmk/utils/certs.py M cmk/utils/crypto/certificate.py M cmk/utils/crypto/deprecated.py M cmk/utils/crypto/keys.py M tests/testlib/certs.py M tests/unit/cmk/utils/crypto/test_certificate.py M tests/unit/cmk/utils/crypto/test_keys.py M tests/unit/cmk/utils/test_certs.py Log Message: ----------- Allow non-RSA keys in certificates cmk.utils.crypto.certificate now supports certificates that use keys other than RSA, such as elliptic curve keys. Verifying certificate chains that include such keys is now possible. The public and private key abstractions in cmk.utils.crypto.keys do not offer direct access to such keys yet, and creating and verifying signatures with the "raw" key is still only possible with RSA keys. CMK-15083 Change-Id: I15747c5e3dbff40f2f7da2508ea6b5b31caded65