-
Notifications
You must be signed in to change notification settings - Fork 4k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
fix(acm) enabled validation of certificates on the zone name #2133
fix(acm) enabled validation of certificates on the zone name #2133
Conversation
As it is now, only certificates with subdomains are correctly validated Got help from @njlaw to find and correct the issue
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Can you please add a unit test for this?
@eladb After some trial and error with the TS tests, i added one test for the root domain case |
@@ -112,4 +112,31 @@ export = { | |||
test.throws(() => expect(stack), /DNS zone hello.com is not authoritative for certificate domain name example.com/); | |||
test.done(); | |||
}, | |||
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This test doesn't seem to verify the new behavior (we need to verify that there's an error thrown when you synthesize)
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Sorry @eladb but i don't think i follow you, i built the test like the previous ones on this test suite, but i am totally inexperienced with writing TS and TS tests so might have missed something?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
You are right, my bad. Looks good.
@@ -112,4 +112,31 @@ export = { | |||
test.throws(() => expect(stack), /DNS zone hello.com is not authoritative for certificate domain name example.com/); | |||
test.done(); | |||
}, | |||
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
You are right, my bad. Looks good.
As it is now, only certificates with subdomains are correctly validated
Got help from @njlaw to find and correct the issue
First PR like this, I hope it looks ok!
Pull Request Checklist
By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license.