smallstep / certificates

🛡️ A private certificate authority (X.509 & SSH) & ACME server for secure automated certificate management, so you can use TLS everywhere & SSO for SSH.
https://smallstep.com/certificates
Apache License 2.0
6.67k stars 433 forks source link

Prevent exposing any internal details in SCEP failure message #1795

Closed hslatman closed 5 months ago

hslatman commented 5 months ago

To be on the safe side, block errors from signing operations from being returned to the client. We should revisit, and make it return a more informative error, but with high assurance that no sensitive information is added to the message.

hslatman commented 5 months ago

A quick follow-up, @dopey 😅