hashicorp / hashicorp/vault-plugin-auth-cf

Add check for valid PEM format / certificate

Open
#33 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Go
Stars
7
Forks
5
Avg merge
1d 7h
Merged PRs (30d)
3

Description

When adding a CF auth backend, Vault will verify the credentials. I've hit a scenario where an invalid CA cert was entered, but it isn't validated till an app attempts to authenticate. This resulted in the following:

https://github.com/hashicorp/vault-plugin-auth-cf/blob/335c793bf24c79b2e12d82eb84ac9ad90cae3ff3/util/certificates.go#L66

Could there be a check where when enabling the auth method backend, Vault validates the `identity_ca_certificates` values and the `cf_api_trusted_certificates` values?

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.