wallenstein/algo
1
0
Fork 0
mirror of https://github.com/trailofbits/algo.git synced 2025-08-02 19:03:04 +02:00
Code Issues Projects Releases Wiki Activity

critical in nameConstraints lost after last refactoring

Browse source
This commit is contained in:
Jack Ivanov 2020-01-21 13:01:54 +01:00 • committed by Jack Ivanov
parent c5cfe9268a
commit d5e4964b32
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
roles/strongswan/defaults/main.yml
View file

@ -17,7 +17,7 @@ subjectAltName: >-
{%- if ipv6_support -%},IP:{{ ansible_default_ipv6['address'] }}{%- endif -%} {%- if ipv6_support -%},IP:{{ ansible_default_ipv6['address'] }}{%- endif -%}
subjectAltName_USER: "email:{{ item }}@{{ openssl_constraint_random_id }}" subjectAltName_USER: "email:{{ item }}@{{ openssl_constraint_random_id }}"
nameConstraints: >- nameConstraints: >-
permitted;{{ subjectAltName_type }}:{{ IP_subject_alt_name }}{{- '/255.255.255.255' if subjectAltName_type == 'IP' else '' -}} critical,permitted;{{ subjectAltName_type }}:{{ IP_subject_alt_name }}{{- '/255.255.255.255' if subjectAltName_type == 'IP' else '' -}}
{%- if subjectAltName_type == 'IP' -%} {%- if subjectAltName_type == 'IP' -%}
,permitted;DNS:{{ openssl_constraint_random_id }} ,permitted;DNS:{{ openssl_constraint_random_id }}
{%- else -%} {%- else -%}