x/vmware-nsxlib
Code Issues Proposed changes

Remove sha224 from supported client cert hash algs

Browse Source 
This is no longer supported by platform

Change-Id: I39cbb1a718bcbe0bd9e0ccff9b9cae4fdddcaccf
This commit is contained in:
Anna Khmelnitsky 2018-05-25 12:41:44 -07:00
parent 734270d9e9
commit e9ab1fcd8d
2 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
vmware_nsxlib/tests/unit/v3/test_cert.py
View File

@ -289,7 +289,7 @@ class NsxV3ClientCertificateTestCase(nsxlib_testcase.NsxClientTestCase):
'subject': {}}, 'subject': {}},
{'key_size': 4096, {'key_size': 4096,
'valid_for_days': 100, 'valid_for_days': 100,
'signature_alg': 'sha', 'signature_alg': 'sha224',
'subject': {}}] 'subject': {}}]
for args in bad_cert_values: for args in bad_cert_values:

2
vmware_nsxlib/v3/client_cert.py
View File

@ -44,7 +44,7 @@ def validate_cert_params(key_size, valid_for_days,
{'value': key_size, {'value': key_size,
'list': expected_key_sizes}) 'list': expected_key_sizes})
expected_signature_algs = ('sha224', 'sha256') expected_signature_algs = ('sha256')
if signature_alg not in expected_signature_algs: if signature_alg not in expected_signature_algs:
raise nsxlib_exceptions.NsxLibInvalidInput( raise nsxlib_exceptions.NsxLibInvalidInput(
error_message=_('Invalid signature algorithm %(value)s' error_message=_('Invalid signature algorithm %(value)s'