JBevillC commented on issue #3181: TO API - DeliveryServices AddSSLKeys Incorrectly stores X509 certificate missing Subject/Authority Key as zero length string. URL: https://github.com/apache/trafficcontrol/issues/3181#issuecomment-453172797 @rawlinp I will upload a Self-Signed Root CA and a Server certificate that is signed by this CA that does not contain the Subject/Authority Identifier Keys. Somehow the certificate generated in this way will completely pass the Verify() method, the loop that checks for Subject/Authority identifier keys doesn't do anything, and thus just a zero length string is left and stored into traffic vault. The http status is 200 with a success message back to the client. This is a very rare code path since most real certificates now have x509v3 Subject/Authority identifier keys, so perhaps it may not be worth fixing.
---------------------------------------------------------------- This is an automated message from the Apache Git Service. To respond to the message, please log on GitHub and use the URL above to go to the specific comment. For queries about this service, please contact Infrastructure at: [email protected] With regards, Apache Git Services
