Venafi / ansible-role-venafi

(END-OF-LIFE) Ansible Role that uses Venafi to streamline machine identity (certificate and key) acquisition.
Apache License 2.0
14 stars 8 forks source link

Improve test for verifying DNS SANs in the issued certificate #30

Closed tr1ck3r closed 4 years ago

tr1ck3r commented 4 years ago

Since the behavior of automatically adding common name (CN) as a DNS subject alternative name (SAN) in the issued certificate varies by certificate authority, it is appropriate for the test to pass whether the CN is added or not. This test was too restrictive and began failing when the Venafi Cloud built-in CA behavior changed from automatically including the CN as a DNS SAN to requiring it to be explicitly specified in the certificate request.