(PUP-9964) Add Puppetserver CA CLI Authoriziation OID to Puppet 7.x

AriaXLi · AriaXLi · commit 38f24392ff01 · 2023-06-29T21:19:42.000-07:00
This commit adds the pp_cli_auth OID, which is a certificate extension that
allows the puppetserver CA CLI tool to submit requests to the puppet-CA API
that change the status of certificates. The OID was created in SERVER-2287 but
was never added to Puppet.
diff --git a/lib/puppet/ssl/oids.rb b/lib/puppet/ssl/oids.rb
@@ -71,6 +71,7 @@ module Puppet::SSL::Oids
 
     ["1.3.6.1.4.1.34380.1.3.1",  'pp_authorization', 'Certificate Extension Authorization'],
     ["1.3.6.1.4.1.34380.1.3.13", 'pp_auth_role', 'Puppet Node Role Name for Authorization'],
+    ["1.3.6.1.4.1.34380.1.3.39", 'pp_cli_auth', 'Puppetserver CA CLI Authorization'],
   ]
 
   @did_register_puppet_oids = false

Original file line number	Diff line number	Diff line change
`@@ -71,6 +71,7 @@ module Puppet::SSL::Oids`
`71`	`71`
`72`	`72`	`["1.3.6.1.4.1.34380.1.3.1", 'pp_authorization', 'Certificate Extension Authorization'],`
`73`	`73`	`["1.3.6.1.4.1.34380.1.3.13", 'pp_auth_role', 'Puppet Node Role Name for Authorization'],`
	`74`	`+ ["1.3.6.1.4.1.34380.1.3.39", 'pp_cli_auth', 'Puppetserver CA CLI Authorization'],`
`74`	`75`	`]`
`75`	`76`
`76`	`77`	`@did_register_puppet_oids = false`