Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

LG-3167 Send is_auth_cert in token for HSDPD-12 #159

Merged
merged 11 commits into from
Aug 6, 2020

Conversation

stevegsa
Copy link
Contributor

@stevegsa stevegsa commented Jul 31, 2020

How: Check for extendedKeyUsage ... 1.3.6.1.5.2.3.4 in the x509 cert extensions and send is_auth_cert boolean back in the token.

@stevegsa stevegsa changed the title LG-3167 Send has_eku in token to identify HSDPD-12 authentication cert LG-3167 Send has_eku in token to identify HSDPD-12 auth cert Jul 31, 2020
Copy link
Contributor

@zachmargolis zachmargolis left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@@ -134,6 +135,7 @@

it 'returns a token with a uuid and subject' do
allow(Figaro.env).to receive(:client_cert_escaped).and_return('true')
allow_any_instance_of(Certificate).to receive(:has_eku?).and_return(true)
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

so much stubbing 😭 --- is it possible to create a cert from the PEM below and then modify it and make a new PEM?

@stevegsa stevegsa changed the title LG-3167 Send has_eku in token to identify HSDPD-12 auth cert LG-3167 Send is_auth_cert in token to identify HSDPD-12 auth cert Aug 5, 2020
@stevegsa stevegsa changed the title LG-3167 Send is_auth_cert in token to identify HSDPD-12 auth cert LG-3167 Send is_auth_cert in token for HSDPD-12 PIV/CAC Aug 5, 2020
@stevegsa stevegsa changed the title LG-3167 Send is_auth_cert in token for HSDPD-12 PIV/CAC LG-3167 Send is_auth_cert in token for HSDPD-12 Aug 5, 2020
Copy link
Contributor

@zachmargolis zachmargolis left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@stevegsa stevegsa merged commit 2f586ae into master Aug 6, 2020
@stevegsa stevegsa deleted the stevegsa-send-eku-pki branch August 6, 2020 15:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants