awatertrevi/infisical
1
0
Fork 0
mirror of https://github.com/awatertrevi/infisical.git synced 2026-10-08 06:27:40 +00:00
Code Issues Packages Projects Releases Wiki Activity

Fix CSR KU/EKU check

Browse Source
This commit is contained in:
Carlos Monastyrski
2025-11-07 18:24:18 -03:00
parent 034478f839
commit 86f308d7d1
1 changed files with 2 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files
backend/src/services/certificate-template-v2/certificate-template-v2-service.ts
+2 -7
View File
@@ -482,7 +482,7 @@ export const certificateTemplateV2ServiceFactory = ({
} }
// Check ALLOWED key usages - if present, all usages must be in allowed list // Check ALLOWED key usages - if present, all usages must be in allowed list
if (request.keyUsages && keyUsagePolicy && keyUsagePolicy.allowed && keyUsagePolicy.allowed.length > 0) { if (request.keyUsages && keyUsagePolicy) {
const allAllowedUsages = [...(keyUsagePolicy.required || []), ...(keyUsagePolicy.allowed || [])]; const allAllowedUsages = [...(keyUsagePolicy.required || []), ...(keyUsagePolicy.allowed || [])];
const invalidUsages = request.keyUsages.filter((usage) => !allAllowedUsages.includes(usage)); const invalidUsages = request.keyUsages.filter((usage) => !allAllowedUsages.includes(usage));
if (invalidUsages.length > 0) { if (invalidUsages.length > 0) {
@@ -517,12 +517,7 @@ export const certificateTemplateV2ServiceFactory = ({
} }
// Check ALLOWED extended key usages - if present, all usages must be in allowed list // Check ALLOWED extended key usages - if present, all usages must be in allowed list
if ( if (request.extendedKeyUsages && extendedKeyUsagePolicy) {
request.extendedKeyUsages &&
extendedKeyUsagePolicy &&
extendedKeyUsagePolicy.allowed &&
extendedKeyUsagePolicy.allowed.length > 0
) {
const allAllowedExtendedUsages = [ const allAllowedExtendedUsages = [
...(extendedKeyUsagePolicy.required || []), ...(extendedKeyUsagePolicy.required || []),
...(extendedKeyUsagePolicy.allowed || []) ...(extendedKeyUsagePolicy.allowed || [])