Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[8.13] Respect --pass option in certutil csr mode (#106105) #106120

Merged
merged 1 commit into from
Mar 8, 2024

Conversation

tvernum
Copy link
Contributor

@tvernum tvernum commented Mar 8, 2024

Backports the following commits to 8.13:

elasticsearch-certutil csr generates a private key and a certificate
signing request (CSR) file. It has always accepted the "--pass" command
line option, but ignore it and always generated an unencrypted private
key.

This commit fixes the utility so the --pass option is respected and the
private key is encrypted.
@tvernum tvernum added :Security/TLS SSL/TLS, Certificates >bug auto-merge-without-approval Automatically merge pull request when CI checks pass (NB doesn't wait for reviews!) backport Team:Security Meta label for security team labels Mar 8, 2024
@elasticsearchmachine elasticsearchmachine merged commit 321c4e1 into elastic:8.13 Mar 8, 2024
18 checks passed
@tvernum tvernum deleted the backport/8.13/pr-106105 branch March 8, 2024 13:20
@tvernum tvernum added v8.13.0 and removed v8.13.1 labels Jun 18, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
auto-merge-without-approval Automatically merge pull request when CI checks pass (NB doesn't wait for reviews!) backport >bug :Security/TLS SSL/TLS, Certificates Team:Security Meta label for security team v8.13.0
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants