awatertrevi/infisical
1
0
Fork 0
mirror of https://github.com/awatertrevi/infisical.git synced 2026-10-07 05:27:48 +00:00
Code Issues Packages Projects Releases Wiki Activity

fixed SAN extension field in certificate issuance

Browse Source
This commit is contained in:
Julius Mieliauskas
2025-08-05 20:19:17 +03:00
parent de2c1c5560
commit e9f5055481
1 changed files with 18 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
backend/src/services/certificate-authority/internal/internal-certificate-authority-service.ts
+18 -2
View File
@@ -1365,7 +1365,7 @@ export const internalCertificateAuthorityServiceFactory = ({
} }
let altNamesArray: { let altNamesArray: {
type: "email" | "dns"; type: "email" | "dns" | "url" | "ip";
value: string; value: string;
}[] = []; }[] = [];
@@ -1390,6 +1390,14 @@ export const internalCertificateAuthorityServiceFactory = ({
}; };
} }
if (z.string().url().safeParse(altName).success) {
return { type: "url", value: altName };
}
if (z.string().ip().safeParse(altName).success) {
return { type: "ip", value: altName };
}
// If altName is neither a valid email nor a valid hostname, throw an error or handle it accordingly // If altName is neither a valid email nor a valid hostname, throw an error or handle it accordingly
throw new Error(`Invalid altName: ${altName}`); throw new Error(`Invalid altName: ${altName}`);
}); });
@@ -1767,7 +1775,7 @@ export const internalCertificateAuthorityServiceFactory = ({
let altNamesFromCsr: string = ""; let altNamesFromCsr: string = "";
let altNamesArray: { let altNamesArray: {
type: "email" | "dns"; type: "email" | "dns" | "url" | "ip";
value: string; value: string;
}[] = []; }[] = [];
if (altNames) { if (altNames) {
@@ -1791,6 +1799,14 @@ export const internalCertificateAuthorityServiceFactory = ({
}; };
} }
if (z.string().url().safeParse(altName).success) {
return { type: "url", value: altName };
}
if (z.string().ip().safeParse(altName).success) {
return { type: "ip", value: altName };
}
// If altName is neither a valid email nor a valid hostname, throw an error or handle it accordingly // If altName is neither a valid email nor a valid hostname, throw an error or handle it accordingly
throw new Error(`Invalid altName: ${altName}`); throw new Error(`Invalid altName: ${altName}`);
}); });