Anchor

iter_alternative_names doesn't honor fail_other_types

Bug #1491077 reported by Grant Murphy
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Anchor
New
Undecided
Unassigned

Bug Description

Tracking TODO items in code as bugs.

http://git.openstack.org/cgit/openstack/anchor/tree/anchor/validators.py#n57

Looks like fail_other_types=True isn't actually being utilized.

Grant Murphy (gmurphy)
summary: - iter_alternative_names silently ignores extensions othe than DNS and
- IPAddress
+ iter_alternative_names doesn't honor fail_other_types
Revision history for this message
Stanislaw Pitucha (stanislaw-pitucha) wrote :

This never made much sense since it relied on text comparison of text-serialised extensions from openssl. Since there are only a few types that really matter, I'd like to deprecate the current implementation and instead go for verifying specifics like IP-ID, DNS-ID, SRV-ID, URI-ID explicitly. (blueprint validator-improvement)

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.