Skip to content

Conversation

@slobodanadamovic
Copy link
Contributor

Fixes an edge test case where we randomly generate an empty list of key
usages then pass it to certutil command. The empty means just apply
the defaults, but we end up asserting based on the generated empty set.

Resolves #126471

Fixes an edge case where we randomly generate an empty list of key
usages then pass it to `certutil` command.
The empty means just apply the defaults, but we assert based on the
generated empty set.

Resolves elastic#126471
@slobodanadamovic slobodanadamovic added >test Issues or PRs that are addressing/adding tests :Security/TLS SSL/TLS, Certificates Team:Security Meta label for security team auto-backport Automatically create backport pull requests when merged v9.0.1 v9.1.0 labels Apr 10, 2025
@slobodanadamovic slobodanadamovic requested a review from a team April 10, 2025 15:47
@slobodanadamovic slobodanadamovic self-assigned this Apr 10, 2025
@elasticsearchmachine
Copy link
Collaborator

Pinging @elastic/es-security (Team:Security)

Copy link
Contributor

@tvernum tvernum left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@slobodanadamovic slobodanadamovic merged commit 3db258e into elastic:main Apr 11, 2025
22 checks passed
@elasticsearchmachine
Copy link
Collaborator

💔 Backport failed

Status Branch Result
9.0 Commit could not be cherrypicked due to conflicts

You can use sqren/backport to manually backport by running backport --upstream elastic/elasticsearch --pr 126621

@slobodanadamovic
Copy link
Contributor Author

💚 All backports created successfully

Status Branch Result
9.0

Questions ?

Please refer to the Backport tool documentation

slobodanadamovic added a commit to slobodanadamovic/elasticsearch that referenced this pull request Apr 11, 2025
Fixes an edge case where we randomly generate an empty list of key
usages then pass it to `certutil` command.
The empty means just apply the defaults, but we assert based on the
generated empty set.

Resolves elastic#126471

Co-authored-by: Tim Vernum <[email protected]>
(cherry picked from commit 3db258e)

# Conflicts:
#	muted-tests.yml
elasticsearchmachine pushed a commit that referenced this pull request Apr 11, 2025
Fixes an edge case where we randomly generate an empty list of key
usages then pass it to `certutil` command.
The empty means just apply the defaults, but we assert based on the
generated empty set.

Resolves #126471

Co-authored-by: Tim Vernum <[email protected]>
(cherry picked from commit 3db258e)

# Conflicts:
#	muted-tests.yml
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

auto-backport Automatically create backport pull requests when merged :Security/TLS SSL/TLS, Certificates Team:Security Meta label for security team >test Issues or PRs that are addressing/adding tests v9.0.1 v9.1.0

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[CI] HttpCertificateCommandTests testGenerateMultipleCertificateWithNewCA failing

3 participants