mirror of https://github.com/hashicorp/vault.git synced 2025-09-01 03:51:08 +02:00

History

Jacob Burroughs 4469b56925

Fix pkcs7 parsing in some cases (#12519 )

* Fix pkcs7 parsing in some cases

brings in https://github.com/mozilla-services/pkcs7/pull/61 from upstream

In some cases but not all, aws includes a certificate in the pkcs7 response,
and currently vault fails to parse those certificates:
```
URL: PUT https://vault.example.com/v1/auth/aws/login
Code: 500. Errors
* failed to parse the BER encoded PKCS#7 signature: ber2der: Invalid BER format
```

This fixes logins on those instances.  Note we could not readily ascertain why
some instances have those certificates and others don't.

* Add changelog entry

* Correct missed line

2021-09-10 12:17:03 -04:00

ber_test.go

Fix pkcs7 parsing in some cases (#12519 )

2021-09-10 12:17:03 -04:00

ber.go

Fix pkcs7 parsing in some cases (#12519 )

2021-09-10 12:17:03 -04:00

decrypt_test.go

creds/aws: Add support for DSA signature verification for EC2 (#12340 )

2021-08-19 09:16:31 -04:00

decrypt.go

creds/aws: Add support for DSA signature verification for EC2 (#12340 )