Uploaded image for project: 'Core Server'
  1. Core Server
  2. SERVER-40841

Regenerate X509 test certificates

    XMLWordPrintable

    Details

    • Backwards Compatibility:
      Fully Compatible
    • Sprint:
      Security 2019-05-20
    • Linked BF Score:
      22

      Description

      Some test certificates were minted with a non-minimal representation of integers. This causes the Go TLS stack to reject them. We should re-mint them.

      The malformed certificates are as follows:

      • badSAN.pem
      • client.pem
      • client_revoked.pem
      • localhostnameCN.pem
      • localhostnameSAN.pem

      Regenerating these certificates is a pre-requisite for re-enabling the tools testing in ssl_cert_password.js. When we re-enable this functionality, we should move the test logic to the tools suite.

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              jonathan.reams Jonathan Reams
              Reporter:
              spencer.jackson Spencer Jackson
              Participants:
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved: