[SERVER-40841] Regenerate X509 test certificates Created: 25/Apr/19  Updated: 29/Oct/23  Resolved: 20/May/19

Status: Closed
Project: Core Server
Component/s: Security, Testing Infrastructure
Affects Version/s: None
Fix Version/s: 4.1.12

Type: Task Priority: Major - P3
Reporter: Spencer Jackson Assignee: Jonathan Reams
Resolution: Fixed Votes: 0
Labels: None
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Issue Links:
Depends
Gantt Dependency
has to be done after SERVER-40840 Disable tools testing in ssl_cert_pas... Closed
Backwards Compatibility: Fully Compatible
Sprint: Security 2019-05-20
Participants:
Linked BF Score: 22

 Description   

Some test certificates were minted with a non-minimal representation of integers. This causes the Go TLS stack to reject them. We should re-mint them.

The malformed certificates are as follows:

  • badSAN.pem
  • client.pem
  • client_revoked.pem
  • localhostnameCN.pem
  • localhostnameSAN.pem

Regenerating these certificates is a pre-requisite for re-enabling the tools testing in ssl_cert_password.js. When we re-enable this functionality, we should move the test logic to the tools suite.



 Comments   
Comment by Githook User [ 20/May/19 ]

Author:

{'name': 'Jonathan Reams', 'email': 'jbreams@mongodb.com', 'username': 'jbreams'}

Message: SERVER-40841 Fix lint
Branch: master
https://github.com/mongodb/mongo/commit/c8e0cc640ba6045ab3f6bd5f192d7c533f45e0f1

Comment by Githook User [ 20/May/19 ]

Author:

{'email': 'jbreams@mongodb.com', 'name': 'Jonathan Reams', 'username': 'jbreams'}

Message: SERVER-40841 Re-issue invalid test certificates
Branch: master
https://github.com/mongodb/mongo/commit/fae0c3f0fa4d5dfbe2f4fb03715b60e9ce3e2d93

Generated at Thu Feb 08 04:56:06 UTC 2024 using Jira 9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66.