Project

General

Profile

Evolution #5489

"ssl_country_name" doit être obligatoirement composé de deux lettres

Added by Joël Cuissinat almost 11 years ago. Updated over 10 years ago.

Status:
Fermé
Priority:
Normal
Assigned To:
Category:
-
Start date:
06/01/2013
Due date:
06/01/2013
% Done:

100%

Estimated time:
1.00 h
Spent time:
Distribution:
EOLE 2.4

Description

Actuellement, cette contrainte n'est pas vérifiée et "pire", il y a un <fill> depuis "suffixe_domaine_academique" qui peut potentiellement faire plus de 2 caractères (même si il est à "fr" par défaut).

Si on met plus de 2 lettres, on obtient :

Génération du certificat de la CA
reconfigure - Erreur lors de la génération de la CA

Et plus précisément :

root@eolebase:~# /usr/bin/openssl req -x509 -config /etc/eole/ssl/ca-eole.conf -newkey rsa:2048 -days 1096 
                 -keyout /etc/ssl/private/tmpkey.key -out /etc/ssl/certs/ca_local.crt
Generating a 2048 bit RSA private key
............................+++
.............................................................................................+++
writing new private key to '/etc/ssl/private/tmpkey.key'
-----
problems making Certificate Request
140048601806496:error:0D07A097:asn1 encoding routines:ASN1_mbstring_ncopy:string too long:a_mbstr.c:154:maxsize=2


Related issues

Follows eole-common - Anomalie #5441: Problème sur le "fill" de "ssl_country_name" [2.4] Fermé 05/27/2013 05/31/2013

Associated revisions

Revision 8657f724 (diff)
Added by Emmanuel GARETTE over 10 years ago

creole/eosfunc : ajout des fonctions valid_len et calc_ssl_country_name (ref #5489)

Revision cbfe893b (diff)
Added by Emmanuel GARETTE over 10 years ago

force la longueur de la variable 'ssl_country_name' à 2 (fixes #5489)

Revision f040e003 (diff)
Added by Emmanuel GARETTE over 10 years ago

creole/eosfunc : ajout des fonctions valid_len et calc_ssl_country_name (ref #5489)

History

#1 Updated by Joël Cuissinat over 10 years ago

  • Target version changed from Eole 2.4-alpha to Eole 2.4-alpha2

#2 Updated by Joël Cuissinat over 10 years ago

  • Target version changed from Eole 2.4-alpha2 to Eole 2.4-beta1

#3 Updated by Daniel Dehennin over 10 years ago

  • Target version changed from Eole 2.4-beta1 to Eole 2.4-beta2

#4 Updated by Emmanuel GARETTE over 10 years ago

  • Status changed from A étudier to Résolu
  • % Done changed from 0 to 100

#5 Updated by Emmanuel GARETTE over 10 years ago

# python
Python 2.7.3 (default, Sep 26 2013, 20:03:06) 
[GCC 4.6.3] on linux2
Type "help", "copyright", "credits" or "license" for more information.
>>> from creole.loader import creole_loader
>>> c=creole_loader(rw=True)
>>> c.creole.general.suffixe_domaine_academique
u'fr'
>>> c.creole.certificats_ssl.ssl_country_name
u'fr'
>>> c.creole.general.suffixe_domaine_academique = u'org'
>>> c.creole.certificats_ssl.ssl_country_name
u'fr'
>>> c.creole.general.suffixe_domaine_academique = u'eu'
>>> c.creole.certificats_ssl.ssl_country_name
u'eu'
>>> c.creole.general.suffixe_domaine_academique = u'fr'
>>> c.creole.certificats_ssl.ssl_country_name
u'fr'
>>> c.creole.general.suffixe_domaine_academique = u'org'
>>> c.creole.certificats_ssl.ssl_country_name
u'fr'

#6 Updated by Joël Cuissinat over 10 years ago

  • Assigned To set to Joël Cuissinat

#7 Updated by Joël Cuissinat over 10 years ago

  • Assigned To changed from Joël Cuissinat to Emmanuel GARETTE

#8 Updated by Joël Cuissinat over 10 years ago

  • Status changed from Résolu to Fermé

La correction me convient (et elle fonctionne).

Also available in: Atom PDF