pvarki / pvarki/python-rasenmaeher-api
Fix problems with cert issuance
Nobody has claimed this yet.
- Dominant language
- Python
- Stars
- 1
- Forks
- 1
- Avg merge
- 4d 13h
- Merged PRs (30d)
- 5
Description
User story
As a user of the rasenmaeher api,
I want to avoid anyone else spoofing my identity,
to maximize security of my usage in the app.
Acceptance Criteria
Outline what you think are requirements for this story to be considered Completed.
- Fix verify_csr (no substring check -> do strict equality)
- Unify logic in
create_with_certandcreate_for_callsignblocklists
In cert manager issuance:
- Force EKU to be only
client auth
Linked things
Link epics, features and other user stories here, if applicable.
https://pvarki.getoutline.com/doc/rasenmaeher-api-trustidentity-audit-OpE3XR3jBm
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by locating verify_csr, create_with_cert, create_for_callsign, and the certificate manager issuance path. Read the related security and certificate-handling logic first, then inspect any existing tests for these entry points. Done means strict CSR verification, unified blocklists, and certificates restricted to client authentication.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- python
- Domain
- api, authentication, security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Active
- Clarity
- Mostly clear
- Newbie friendliness
- 52/100