kubernetes-client/csharp
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add an exception for certs known not to work. (#322)

Browse Source
This commit is contained in:
Brendan Burns
2019-11-21 20:29:28 -08:00
committed by Kubernetes Prow Robot
parent aadeb74af9
commit 8a615c275a
1 changed files with 7 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
src/KubernetesClient/CertUtils.cs
View File

@@ -74,7 +74,13 @@ namespace k8s
} }
var cert = new X509CertificateParser().ReadCertificate(new MemoryStream(certData)); var cert = new X509CertificateParser().ReadCertificate(new MemoryStream(certData));
// key usage is a bit string, zero-th bit is 'digitalSignature'
// See https://www.alvestrand.no/objectid/2.5.29.15.html for more details.
if (cert != null && cert.GetKeyUsage() != null && !cert.GetKeyUsage()[0]) {
throw new Exception(
"Client certificates must be marked for digital signing. " +
"See https://github.com/kubernetes-client/csharp/issues/319");
}
object obj; object obj;
using (var reader = new StreamReader(new MemoryStream(keyData))) using (var reader = new StreamReader(new MemoryStream(keyData)))
{ {