Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update certs for SecuritySSLReloadCertsActionTests #2679

Merged
merged 3 commits into from
Apr 14, 2023
Merged

Update certs for SecuritySSLReloadCertsActionTests #2679

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
cbf6121
Update certs for SecuritySSLReloadCertsActionTests
cwperks Apr 13, 2023
e443519
Add otherName back in
cwperks Apr 14, 2023
0d32ae1
Ensure files end in new line
cwperks Apr 14, 2023
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
10 changes: 5 additions & 5 deletions src/test/java/org/opensearch/security/ssl/SecuritySSLReloadCertsActionTests.java
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -53,17 +53,17 @@ public class SecuritySSLReloadCertsActionTests extends SingleClusterTest {
"issuer_dn", "CN=Example Com Inc. Signing CA,OU=Example Com Inc. Signing CA,O=Example Com Inc.,DC=example,DC=com",
"subject_dn", "CN=node-1.example.com,OU=SSL,O=Test,L=Test,C=DE",
"san", "[[8, 1.2.3.4.5.5], [0, [2.5.4.3, node-1.example.com]], [2, node-1.example.com], [2, localhost], [7, 127.0.0.1]]",
Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I changed this back from the change introduced in this PR because I'm not positive how to specify the SAN in the openssl command. PR where this was added: https://github.com/opensearch-project/security/pull/1369/files#diff-9e1e704af587fb1787556fe19857df59ef099619245b491958b0c9de83e5f2fe

Node certificates are being generated with the following commands:

openssl genrsa -out node-key-temp.pem 2048
openssl pkcs8 -inform PEM -outform PEM -in node-key-temp.pem -topk8 -nocrypt -v1 PBE-SHA1-3DES -out node.key.pem
openssl req -new -key node.key.pem -subj "/C=DE/L=Test/O=Test/OU=SSL/CN=node-1.example.com" -out node.csr
openssl x509 -req -days 3650 -extfile <(printf "subjectAltName=DNS:node-1.example.com,DNS:localhost,IP:127.0.0.1,RID:1.2.3.4.5.5") -in node.csr -out node.crt.pem -CA signing.pem -CAkey signing-key.pem

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I'm able to add otherName in the subjectAltName, but I'm not sure if this is correct:

openssl genrsa -out node2-key-temp.pem 2048
openssl pkcs8 -inform PEM -outform PEM -in node2-key-temp.pem -topk8 -nocrypt -v1 PBE-SHA1-3DES -out node2.key.pem
openssl req -new -key node2.key.pem -subj "/C=DE/L=Test/O=Test/OU=SSL/CN=node-2.example.com" -out node2.csr
openssl x509 -req -days 3650 -extfile <(printf "subjectAltName=DNS:node-2.example.com,DNS:localhost,IP:127.0.0.1,RID:1.2.3.4.5.5,otherName:2.5.4.3;UTF8:node-2.example.com") -in node2.csr -out node2.crt.pem -CA signing.pem -CAkey signing-key.pem

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@jksmth Would you be able to provide the commands you used to generate certs in this PR? #1369

Copy link
Member Author

@cwperks cwperks Apr 14, 2023 •
edited
Loading

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I regenerated the node certificates using:

openssl genrsa -out node-key-temp.pem 2048
openssl pkcs8 -inform PEM -outform PEM -in node-key-temp.pem -topk8 -nocrypt -v1 PBE-SHA1-3DES -out node.key.pem
openssl req -new -key node.key.pem -subj "/C=DE/L=Test/O=Test/OU=SSL/CN=node-1.example.com" -out node.csr
openssl x509 -req -days 3650 -extfile <(printf "subjectAltName=RID:1.2.3.4.5.5,otherName:2.5.4.3;UTF8:node-1.example.com,DNS:node-1.example.com,DNS:localhost,IP:127.0.0.1") -in node.csr -out node.crt.pem -CA signing.pem -CAkey signing-key.pem

openssl genrsa -out node-new-key-temp.pem 2048
openssl pkcs8 -inform PEM -outform PEM -in node-new-key-temp.pem -topk8 -nocrypt -v1 PBE-SHA1-3DES -out node-new.key.pem
openssl req -new -key node-new.key.pem -subj "/C=DE/L=Test/O=Test/OU=SSL/CN=node-1.example.com" -out node-new.csr
openssl x509 -req -days 3650 -extfile <(printf "subjectAltName=RID:1.2.3.4.5.5,otherName:2.5.4.3;UTF8:node-1.example.com,DNS:node-1.example.com,DNS:localhost,IP:127.0.0.1") -in node-new.csr -out node-new.crt.pem -CA signing.pem -CAkey signing-key.pem

openssl genrsa -out node-wrong-key-temp.pem 2048
openssl pkcs8 -inform PEM -outform PEM -in node-wrong-key-temp.pem -topk8 -nocrypt -v1 PBE-SHA1-3DES -out node-wrong.key.pem
openssl req -new -key node-wrong.key.pem -subj "/C=DE/L=Test/O=Test/OU=SSL/CN=node-2.example.com" -out node-wrong.csr
openssl x509 -req -days 3650 -extfile <(printf "subjectAltName=RID:1.2.3.4.5.5,otherName:2.5.4.3;UTF8:node-2.example.com,DNS:node-2.example.com,DNS:localhost,IP:127.0.0.1") -in node-wrong.csr -out node-wrong.crt.pem -CA signing.pem -CAkey signing-key.pem

and the tests pass locally

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

More details about subjectAltName can be found here: https://www.openssl.org/docs/man1.0.2/man5/x509v3_config.html

"not_before", "2021-04-12T00:07:08Z",
"not_after", "2023-04-12T00:07:08Z"
"not_before", "2023-04-14T13:22:53Z",
"not_after", "2033-04-11T13:22:53Z"
));

private final List<Map<String, String>> NEW_NODE_CERT_DETAILS = ImmutableList.of(
ImmutableMap.of(
"issuer_dn", "CN=Example Com Inc. Signing CA,OU=Example Com Inc. Signing CA,O=Example Com Inc.,DC=example,DC=com",
"subject_dn", "CN=node-1.example.com,OU=SSL,O=Test,L=Test,C=DE",
"san", "[[8, 1.2.3.4.5.5], [0, [2.5.4.3, node-1.example.com]], [2, node-1.example.com], [2, localhost], [7, 127.0.0.1]]",
"not_before", "2021-04-12T00:09:00Z",
"not_after", "2023-04-12T00:09:00Z"
"not_before", "2023-04-14T13:23:00Z",
"not_after", "2033-04-11T13:23:00Z"
)
);

Expand Down Expand Up @@ -264,7 +264,7 @@ private void initClusterWithTestCerts() throws Exception {
private void initTestCluster(final String transportPemCertFilePath, final String transportPemKeyFilePath, final String httpPemCertFilePath, final String httpPemKeyFilePath, final boolean sslCertReload) throws Exception {
final Settings settings = Settings.builder()
.putList(ConfigConstants.SECURITY_AUTHCZ_ADMIN_DN, "CN=kirk,OU=client,O=client,L=Test,C=DE")
.putList(ConfigConstants.SECURITY_NODES_DN, "C=DE,L=Test,O=Test,OU=SSL,CN=node-1.example.com")
.putList(ConfigConstants.SECURITY_NODES_DN, "CN=node-1.example.com,OU=SSL,O=Test,L=Test,C=DE")
.put(SSLConfigConstants.SECURITY_SSL_TRANSPORT_ENABLED, true)
.put(SSLConfigConstants.SECURITY_SSL_HTTP_ENABLED, true)
.put(SSLConfigConstants.SECURITY_SSL_TRANSPORT_ENFORCE_HOSTNAME_VERIFICATION, false)
Expand Down
Binary file modified src/test/resources/ssl/reload/kirk-keystore.jks
View file
Open in desktop
Binary file not shown.
116 changes: 66 additions & 50 deletions src/test/resources/ssl/reload/node-new.crt.pem
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,56 +1,72 @@
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----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aW5nIENBMSQwIgYDVQQDDBtFeGFtcGxlIENvbSBJbmMuIFNpZ25pbmcgQ0EwggEi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-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
52 changes: 26 additions & 26 deletions src/test/resources/ssl/reload/node-new.key.pem
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,28 +1,28 @@
-----BEGIN PRIVATE KEY-----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MIIEvQIBADANBgkqhkiG9w0BAQEFAASCBKcwggSjAgEAAoIBAQC7h74ZvaMfJiWF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-----END PRIVATE KEY-----
Loading