voxpupuli / hiera-eyaml

A backend for Hiera that provides per-value asymmetric encryption of sensitive data
MIT License
527 stars 130 forks source link

Remove non-essential public certificate attributes #380

Closed cmd-ntrf closed 4 months ago

cmd-ntrf commented 4 months ago

The following certificate attributes have no use in the encryption or decryption process as it is implemented in hiera-eyaml:

These attributes are required when executing with JRuby to sign the certificate:

The attributes that are always essential are the serial number and the public key. When left unset, the serial number is generated randomly or set to 0, which is fine in the context of hiera-eyaml.