aws / aws-ec2-instance-connect-config

This is the ssh daemon configuration and necessary EC2 instance scripting to enable EC2 Instance Connect. Also included is various package manager configurations for packaging for various Linux distributions.
Apache License 2.0
83 stars 35 forks source link

Fix parse authorized keys script to work with OpenSSL 3.0.2 #39

Closed meislerj closed 2 years ago

meislerj commented 2 years ago

Issue #, if available: https://github.com/aws/aws-ec2-instance-connect-config/issues/38

Description of changes:

Fix parse authorized keys script to work with OpenSSL 3.0.2. Ubuntu 22.04 upgraded OpenSSL to 3.0.2, which causes one of the intermediate CA certificates to fail strict x509 verification. We're investigating that issue. This change fixes EC2 Instance Connect on Ubuntu 22.04 by only verifying CA certificates that aren't in /etc/ssl/certs.

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.