SUSE / velum

Dashboard for CaaS Platform clusters (v1, v2 and v3)
https://www.suse.com/
Apache License 2.0
54 stars 30 forks source link

[bsc#1121147] Do not allow '.' or '/' symbols in system certificate names. #731

Closed bergmannf closed 5 years ago

bergmannf commented 5 years ago

This way when salt extracts the name to construct the certificate path, it will not be able to break out of the folder for trusted certificates.

This is a first layer fix for bnc#1121147.