openstack/anchor
Code Issues Proposed changes
Files
5456abff94b46ddc76094a78622b2f762803aa0a
anchor/doc/source/fixups.rst
Stanisław Pitucha 5456abff94 Add fixups configuration / processing 
Fixups allow changing the submitted CSR before signing. This may be
useful for enforcing rules, like removing deprecated options.

All fixups are available in the "anchor.fixups" namespace and each one
returns either a new or a modified CSR when it's finished.

Partial-bug: #1401580
Change-Id: Id42802194bbdf36799660899eb34f728782bc893
2015-09-07 15:33:38 +10:00

369 B
Raw Blame History

Fixups

Fixups can be used to modify submitted CSRs before sigining. That means for example adding extra name elements, or extensions. Each fixup is loaded from the "anchor.fixups" namespace using stevedore and gets access to the parsed CSR and the configuration.

Unlike validators, each fixup has to return either a new CSR structure or the modified original.