Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add signature_bits to sign-intermediate, sign-verbatim #16124

Merged
merged 3 commits into from
Jun 23, 2022

Conversation

cipherboy
Copy link
Contributor

@cipherboy cipherboy commented Jun 23, 2022

Both of these two signing requests lacked the signature_bits parameter, prohibiting callers from modifying the signature size on RSA key sizes.

Notably, this parameter is present on root generation and role based signing. Since this parameter might change from request to request, I opted not to pull it out of the role and instead use the API-provided value.

This endpoint was lacking the signature_bits field like all the other
endpoints. Notably, in #15478, the ability to customize the intermediate
CSR's signature bits was removed without checking for the ability to
customize the final (root-signed) intermediate certificate's value.

This adds in that missing ability, bringing us parity with root
generation and role-based signing.

Signed-off-by: Alexander Scheel <[email protected]>
This endpoint was also lacking the signature_bits field, preventing
other signature hash functions from being utilized here.

Signed-off-by: Alexander Scheel <[email protected]>
Signed-off-by: Alexander Scheel <[email protected]>
Copy link
Contributor

@stevendpclark stevendpclark left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lgtm

@cipherboy
Copy link
Contributor Author

Thanks! Merging...

@cipherboy cipherboy merged commit 21938b6 into main Jun 23, 2022
@cipherboy cipherboy deleted the cipherboy-add-signature-bits-to-sign-intermediate branch December 1, 2022 14:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants