a-c-m
/
community.crypto
mirror of https://github.com/ansible-collections/community.crypto.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

certificate_complete_chain: do not stop execution on unsupported algorithm (#457) 

* Do not stop execution on unsupported algorithm.

* Fix typo.
pull/459/head
Felix Fontein 2022-05-20 07:22:35 +02:00 committed by GitHub
parent 40cf8ba2ce
commit c49102d688
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
changelogs/fragments/457-certificate_complete_chain-unsupported-algorithm.yml Normal file
View File

@ -0,0 +1,2 @@
bugfixes:
- "certificate_complete_chain - do not stop execution if an unsupported signature algorithm is encountered; warn instead (https://github.com/ansible-collections/community.crypto/pull/457)."

4
plugins/modules/certificate_complete_chain.py
View File

@ -133,6 +133,7 @@ from ansible_collections.community.crypto.plugins.module_utils.crypto.pem import
CRYPTOGRAPHY_IMP_ERR = None CRYPTOGRAPHY_IMP_ERR = None
try: try:
import cryptography import cryptography
import cryptography.exceptions
import cryptography.hazmat.backends import cryptography.hazmat.backends
import cryptography.hazmat.primitives.serialization import cryptography.hazmat.primitives.serialization
import cryptography.hazmat.primitives.asymmetric.rsa import cryptography.hazmat.primitives.asymmetric.rsa
@ -190,6 +191,9 @@ def is_parent(module, cert, potential_parent):
return True return True
except cryptography.exceptions.InvalidSignature as dummy: except cryptography.exceptions.InvalidSignature as dummy:
return False return False
except cryptography.exceptions.UnsupportedAlgorithm as dummy:
module.warn('Unsupported algorithm "{0}"'.format(cert.cert.signature_hash_algorithm))
return False
except Exception as e: except Exception as e:
module.fail_json(msg='Unknown error on signature validation: {0}'.format(e)) module.fail_json(msg='Unknown error on signature validation: {0}'.format(e))