Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update certs for SecuritySSLReloadCertsActionTests #2679

Merged
merged 3 commits into from
Apr 14, 2023
Merged

Update certs for SecuritySSLReloadCertsActionTests #2679

Show file tree
Hide file tree
Changes from 1 commit
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
cbf6121
Update certs for SecuritySSLReloadCertsActionTests
cwperks Apr 13, 2023
e443519
Add otherName back in
cwperks Apr 14, 2023
0d32ae1
Ensure files end in new line
cwperks Apr 14, 2023
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
14 changes: 7 additions & 7 deletions src/test/java/org/opensearch/security/ssl/SecuritySSLReloadCertsActionTests.java
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -52,18 +52,18 @@ public class SecuritySSLReloadCertsActionTests extends SingleClusterTest {
ImmutableMap.of(
"issuer_dn", "CN=Example Com Inc. Signing CA,OU=Example Com Inc. Signing CA,O=Example Com Inc.,DC=example,DC=com",
"subject_dn", "CN=node-1.example.com,OU=SSL,O=Test,L=Test,C=DE",
"san", "[[8, 1.2.3.4.5.5], [0, [2.5.4.3, node-1.example.com]], [2, node-1.example.com], [2, localhost], [7, 127.0.0.1]]",
Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I changed this back from the change introduced in this PR because I'm not positive how to specify the SAN in the openssl command. PR where this was added: https://github.com/opensearch-project/security/pull/1369/files#diff-9e1e704af587fb1787556fe19857df59ef099619245b491958b0c9de83e5f2fe

Node certificates are being generated with the following commands:

openssl genrsa -out node-key-temp.pem 2048
openssl pkcs8 -inform PEM -outform PEM -in node-key-temp.pem -topk8 -nocrypt -v1 PBE-SHA1-3DES -out node.key.pem
openssl req -new -key node.key.pem -subj "/C=DE/L=Test/O=Test/OU=SSL/CN=node-1.example.com" -out node.csr
openssl x509 -req -days 3650 -extfile <(printf "subjectAltName=DNS:node-1.example.com,DNS:localhost,IP:127.0.0.1,RID:1.2.3.4.5.5") -in node.csr -out node.crt.pem -CA signing.pem -CAkey signing-key.pem

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I'm able to add otherName in the subjectAltName, but I'm not sure if this is correct:

openssl genrsa -out node2-key-temp.pem 2048
openssl pkcs8 -inform PEM -outform PEM -in node2-key-temp.pem -topk8 -nocrypt -v1 PBE-SHA1-3DES -out node2.key.pem
openssl req -new -key node2.key.pem -subj "/C=DE/L=Test/O=Test/OU=SSL/CN=node-2.example.com" -out node2.csr
openssl x509 -req -days 3650 -extfile <(printf "subjectAltName=DNS:node-2.example.com,DNS:localhost,IP:127.0.0.1,RID:1.2.3.4.5.5,otherName:2.5.4.3;UTF8:node-2.example.com") -in node2.csr -out node2.crt.pem -CA signing.pem -CAkey signing-key.pem

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@jksmth Would you be able to provide the commands you used to generate certs in this PR? #1369

Copy link
Member Author

@cwperks cwperks Apr 14, 2023 •
edited
Loading

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I regenerated the node certificates using:

openssl genrsa -out node-key-temp.pem 2048
openssl pkcs8 -inform PEM -outform PEM -in node-key-temp.pem -topk8 -nocrypt -v1 PBE-SHA1-3DES -out node.key.pem
openssl req -new -key node.key.pem -subj "/C=DE/L=Test/O=Test/OU=SSL/CN=node-1.example.com" -out node.csr
openssl x509 -req -days 3650 -extfile <(printf "subjectAltName=RID:1.2.3.4.5.5,otherName:2.5.4.3;UTF8:node-1.example.com,DNS:node-1.example.com,DNS:localhost,IP:127.0.0.1") -in node.csr -out node.crt.pem -CA signing.pem -CAkey signing-key.pem

openssl genrsa -out node-new-key-temp.pem 2048
openssl pkcs8 -inform PEM -outform PEM -in node-new-key-temp.pem -topk8 -nocrypt -v1 PBE-SHA1-3DES -out node-new.key.pem
openssl req -new -key node-new.key.pem -subj "/C=DE/L=Test/O=Test/OU=SSL/CN=node-1.example.com" -out node-new.csr
openssl x509 -req -days 3650 -extfile <(printf "subjectAltName=RID:1.2.3.4.5.5,otherName:2.5.4.3;UTF8:node-1.example.com,DNS:node-1.example.com,DNS:localhost,IP:127.0.0.1") -in node-new.csr -out node-new.crt.pem -CA signing.pem -CAkey signing-key.pem

openssl genrsa -out node-wrong-key-temp.pem 2048
openssl pkcs8 -inform PEM -outform PEM -in node-wrong-key-temp.pem -topk8 -nocrypt -v1 PBE-SHA1-3DES -out node-wrong.key.pem
openssl req -new -key node-wrong.key.pem -subj "/C=DE/L=Test/O=Test/OU=SSL/CN=node-2.example.com" -out node-wrong.csr
openssl x509 -req -days 3650 -extfile <(printf "subjectAltName=RID:1.2.3.4.5.5,otherName:2.5.4.3;UTF8:node-2.example.com,DNS:node-2.example.com,DNS:localhost,IP:127.0.0.1") -in node-wrong.csr -out node-wrong.crt.pem -CA signing.pem -CAkey signing-key.pem

and the tests pass locally

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

More details about subjectAltName can be found here: https://www.openssl.org/docs/man1.0.2/man5/x509v3_config.html

"not_before", "2021-04-12T00:07:08Z",
"not_after", "2023-04-12T00:07:08Z"
"san", "[[2, node-1.example.com], [2, localhost], [7, 127.0.0.1], [8, 1.2.3.4.5.5]]",
"not_before", "2023-04-12T21:00:43Z",
"not_after", "2033-04-09T21:00:43Z"
));

private final List<Map<String, String>> NEW_NODE_CERT_DETAILS = ImmutableList.of(
ImmutableMap.of(
"issuer_dn", "CN=Example Com Inc. Signing CA,OU=Example Com Inc. Signing CA,O=Example Com Inc.,DC=example,DC=com",
"subject_dn", "CN=node-1.example.com,OU=SSL,O=Test,L=Test,C=DE",
"san", "[[8, 1.2.3.4.5.5], [0, [2.5.4.3, node-1.example.com]], [2, node-1.example.com], [2, localhost], [7, 127.0.0.1]]",
"not_before", "2021-04-12T00:09:00Z",
"not_after", "2023-04-12T00:09:00Z"
"san", "[[2, node-1.example.com], [2, localhost], [7, 127.0.0.1], [8, 1.2.3.4.5.5]]",
"not_before", "2023-04-13T22:05:54Z",
"not_after", "2033-04-10T22:05:54Z"
)
);

Expand Down Expand Up @@ -264,7 +264,7 @@ private void initClusterWithTestCerts() throws Exception {
private void initTestCluster(final String transportPemCertFilePath, final String transportPemKeyFilePath, final String httpPemCertFilePath, final String httpPemKeyFilePath, final boolean sslCertReload) throws Exception {
final Settings settings = Settings.builder()
.putList(ConfigConstants.SECURITY_AUTHCZ_ADMIN_DN, "CN=kirk,OU=client,O=client,L=Test,C=DE")
.putList(ConfigConstants.SECURITY_NODES_DN, "C=DE,L=Test,O=Test,OU=SSL,CN=node-1.example.com")
.putList(ConfigConstants.SECURITY_NODES_DN, "CN=node-1.example.com,OU=SSL,O=Test,L=Test,C=DE")
.put(SSLConfigConstants.SECURITY_SSL_TRANSPORT_ENABLED, true)
.put(SSLConfigConstants.SECURITY_SSL_HTTP_ENABLED, true)
.put(SSLConfigConstants.SECURITY_SSL_TRANSPORT_ENFORCE_HOSTNAME_VERIFICATION, false)
Expand Down
Binary file modified src/test/resources/ssl/reload/kirk-keystore.jks
View file
Open in desktop
Binary file not shown.
116 changes: 66 additions & 50 deletions src/test/resources/ssl/reload/node-new.crt.pem
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,56 +1,72 @@
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
MIIEBzCCAu+gAwIBAgIUf8RhLrREqQU02WxnXl87059YCKswDQYJKoZIhvcNAQEL
BQAwgY8xEzARBgoJkiaJk/IsZAEZFgNjb20xFzAVBgoJkiaJk/IsZAEZFgdleGFt
cGxlMRkwFwYDVQQKDBBFeGFtcGxlIENvbSBJbmMuMSEwHwYDVQQLDBhFeGFtcGxl
IENvbSBJbmMuIFJvb3QgQ0ExITAfBgNVBAMMGEV4YW1wbGUgQ29tIEluYy4gUm9v
dCBDQTAeFw0yMzA0MTIyMTAwNDNaFw0zMzA0MDkyMTAwNDNaMIGVMRMwEQYKCZIm
iZPyLGQBGRYDY29tMRcwFQYKCZImiZPyLGQBGRYHZXhhbXBsZTEZMBcGA1UECgwQ
RXhhbXBsZSBDb20gSW5jLjEkMCIGA1UECwwbRXhhbXBsZSBDb20gSW5jLiBTaWdu
aW5nIENBMSQwIgYDVQQDDBtFeGFtcGxlIENvbSBJbmMuIFNpZ25pbmcgQ0EwHhcN
MjEwNDEyMDAwOTAwWhcNMjMwNDEyMDAwOTAwWjBWMQswCQYDVQQGEwJERTENMAsG
A1UEBwwEVGVzdDENMAsGA1UECgwEVGVzdDEMMAoGA1UECwwDU1NMMRswGQYDVQQD
DBJub2RlLTEuZXhhbXBsZS5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC+PKQOneEPtQIt4G8yeqrAhFGXUkFDID5bnAb7mk5ALX5B8bWYQa7hER6x
QpP+a7CdPLDm+PLTGkGPT0S7HpcOYli3qtED0zkk8yaCL8ztk3oyLuV97u8x4A+r
OXoO2nmrG9ck8/XZN0ktu8Q87l0EaSMsCwuRJ+A/vFeKIEijzfjhBPjn7smYUpN0
LprrM+o//OHPsQEXsRHOpjIM7KC8a+luRxAlrxotHO0lWEA05pNHya5fqkhdYQ1M
gR0cb8zTxBB+DAfmHCgzw4rf4kSd11LJbk5CITeSd98xV28TanaDli8BHfDbk3TM
iASv3LJyq5UX/1yD1CG41UH6vpoRAgMBAAGjggF2MIIBcjCBvAYDVR0jBIG0MIGx
gBTS02Hh6adcYFVpsHSBAGZYMvoGRKGBlaSBkjCBjzETMBEGCgmSJomT8ixkARkW
A2NvbTEXMBUGCgmSJomT8ixkARkWB2V4YW1wbGUxGTAXBgNVBAoMEEV4YW1wbGUg
Q29tIEluYy4xITAfBgNVBAsMGEV4YW1wbGUgQ29tIEluYy4gUm9vdCBDQTEhMB8G
A1UEAwwYRXhhbXBsZSBDb20gSW5jLiBSb290IENBggECMB0GA1UdDgQWBBRQWhAY
IPA14V/TdxjMqcvwbdG/UTAMBgNVHRMBAf8EAjAAMA4GA1UdDwEB/wQEAwIF4DAg
BgNVHSUBAf8EFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwUgYDVR0RBEswSYgFKgME
BQWgGwYDVQQDoBQMEm5vZGUtMS5leGFtcGxlLmNvbYISbm9kZS0xLmV4YW1wbGUu
Y29tgglsb2NhbGhvc3SHBH8AAAEwDQYJKoZIhvcNAQELBQADggEBAJVsT7kQ5JYS
dfZfo7Oq6DJfNPPPSUiGNuN8epcEF7jvEYbvZzaxAYZFqGOh7k8jG2/ISjYm6IW/
8g8sOraYfjY1+An+UFq1Z9ykemYVyzySpHMKn8PqtIdcBzaX0fA8hO6Q0Gsm6V9G
/KpN3696rAUHhgGFSE01fVcq2B5Keuk/RDFLhfGAcDT4XO4ZyT5ouHZzVuXatkgx
OJQCsxtyvEajvXDMFQYddubBZwptM+uoFOe1G3cLYc39tRk+O/RTAcfAWN0VyBfD
/etGwf7991oIOCaNtCzHgGiOr5fjGJ+AvUU1plSVsoArxpHiRBxMG/Fvyb/uN9g+
o1yGUF5oYqA=
aW5nIENBMSQwIgYDVQQDDBtFeGFtcGxlIENvbSBJbmMuIFNpZ25pbmcgQ0EwggEi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-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
MIIEqTCCA5GgAwIBAgIBAjANBgkqhkiG9w0BAQsFADCBjzETMBEGCgmSJomT8ixk
ARkWA2NvbTEXMBUGCgmSJomT8ixkARkWB2V4YW1wbGUxGTAXBgNVBAoMEEV4YW1w
bGUgQ29tIEluYy4xITAfBgNVBAsMGEV4YW1wbGUgQ29tIEluYy4gUm9vdCBDQTEh
MB8GA1UEAwwYRXhhbXBsZSBDb20gSW5jLiBSb290IENBMB4XDTIxMDQxMjAwMDUx
M1oXDTMxMDQxMDAwMDUxM1owgZUxEzARBgoJkiaJk/IsZAEZFgNjb20xFzAVBgoJ
kiaJk/IsZAEZFgdleGFtcGxlMRkwFwYDVQQKDBBFeGFtcGxlIENvbSBJbmMuMSQw
IgYDVQQLDBtFeGFtcGxlIENvbSBJbmMuIFNpZ25pbmcgQ0ExJDAiBgNVBAMMG0V4
YW1wbGUgQ29tIEluYy4gU2lnbmluZyBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJjVJ9Ipq0uCE7EE0RRBadkrIm7J8OGa2xeFCEpsw+hqQbmftrm0
V5XFpRKznv7r9JxFQn4uUM/Tqxt/mZ9Qql6IGWiNeK4e0Hfh+Lc/VD+w+mDqxo52
zv0afYyyM/1NiOyKV7hO0Akwj25zAfnqs2FbsZzVXtRpgOnfOdfKpUL6fKAxwjex
+0nOOaS5D+unS64sh0mTMVD32iag+tg6aiiW914Jmrkd4yDV3uoXh/FKafRRWHSq
pwO7Xilb+fLRMiQ1N09mTE8Um12G7mVdBaZpbluwtv2tiS52n8zzpKYbohS2m1ir
lJMASh6qEKzHUlzmERhq4Ib7V+p0E+gPadMCAwEAAaOCAQYwggECMBIGA1UdEwEB
/wQIMAYBAf8CAQAwgbwGA1UdIwSBtDCBsYAUrs3v6ngKiRF/4eiBW+3eCSjTVo+h
gZWkgZIwgY8xEzARBgoJkiaJk/IsZAEZFgNjb20xFzAVBgoJkiaJk/IsZAEZFgdl
eGFtcGxlMRkwFwYDVQQKDBBFeGFtcGxlIENvbSBJbmMuMSEwHwYDVQQLDBhFeGFt
cGxlIENvbSBJbmMuIFJvb3QgQ0ExITAfBgNVBAMMGEV4YW1wbGUgQ29tIEluYy4g
Um9vdCBDQYIBATAdBgNVHQ4EFgQU0tNh4emnXGBVabB0gQBmWDL6BkQwDgYDVR0P
AQH/BAQDAgGGMA0GCSqGSIb3DQEBCwUAA4IBAQAmRbuLhYdGYjdndROJilIQ4DUD
HYYijortmkq6ZNQiB7I2teBZjra2xcKp0qaOkG9nJCzhHvGTw/URjWAxFZ5n5hhx
iBTJZTGY6bk2SWfJxdd3Zld6ybsoaQTO/ZnfuTE0SgxWx1e5q/mRBKvRwF02bJu3
YNlJMJVuIDxurrUK2CXrgG/BOCYMyiHNmn1Spsh+x+6B9u28CE0M52+HtNJwyQw6
qPMSNiovXRkqk7E40e7ZY3MS85Pr4L0Us048SswPEpf/+IjV/zTcDP22pQfcjMOX
DZpdAOGgvqhL9t7M1lcxJrI0cIcBNWOPVa3zsCDU7CXF+riL0Va6TvoChVtT
MIIEATCCAumgAwIBAgIUO5pwerTrIJkibcZoY8ZxK8KCDT4wDQYJKoZIhvcNAQEL
BQAwgY8xEzARBgoJkiaJk/IsZAEZFgNjb20xFzAVBgoJkiaJk/IsZAEZFgdleGFt
cGxlMRkwFwYDVQQKDBBFeGFtcGxlIENvbSBJbmMuMSEwHwYDVQQLDBhFeGFtcGxl
IENvbSBJbmMuIFJvb3QgQ0ExITAfBgNVBAMMGEV4YW1wbGUgQ29tIEluYy4gUm9v
dCBDQTAeFw0yMzA0MTIyMTAwNDNaFw0zMzA0MDkyMTAwNDNaMIGPMRMwEQYKCZIm
iZPyLGQBGRYDY29tMRcwFQYKCZImiZPyLGQBGRYHZXhhbXBsZTEZMBcGA1UECgwQ
RXhhbXBsZSBDb20gSW5jLjEhMB8GA1UECwwYRXhhbXBsZSBDb20gSW5jLiBSb290
IENBMSEwHwYDVQQDDBhFeGFtcGxlIENvbSBJbmMuIFJvb3QgQ0EwggEiMA0GCSqG
SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgTyzX2ZRIvkAzJysKYCVialXIZkvYyRxu
rtqYawm60gvUKOqEmhDIc2p/ySLnvxcrUx5q20pFoSS6+9rtT3D5wapArOf2v6g8
+c2f5l2GhiMhxg6rRkvuCUWpSC9rubg4X1rkhaK8pZiLtC9qKLi3ZIG9rNubALZn
XuDD3nQ03pEKG3iy+hUVF7c876J9iFlqJU5RZCTfGKNaRYAnCtm/wWiHVYwAV1Gf
awjLjBfrFwcrJTWJyLxqg8z2DuXWm5Lsb+D8+9rqYZF71BvqS4ej5QLPrGXEeds1
MX38RRJPYN2SdlMDMomjxRZyDSubZV40mLe+4znmFcGuMhouyDSvAgMBAAGjUzBR
MB0GA1UdDgQWBBSio+c9cv0rKRGnHryWwo097Opa/jAfBgNVHSMEGDAWgBSio+c9
cv0rKRGnHryWwo097Opa/jAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUA
A4IBAQCdEXxctLUFE0IoO1HDfE6LtNs2+I488P3Cp+hbHvKhHJeeY/48r0Gi57hQ
sR+Bfut3RjmdmKw9RcYylTgtXXmWQ3E6HqXaaZSnaG1TCER3bboxU7HG2IbaZiGu
/25K92rtq9FY0YNhCGYodq3cEzYWhX0pj3yj4N4193aBXrAaxyAALNnQ2Kwi6bw4
WtS780NIgNFsGeU6H2/0JwDYlZVdhyR0G9uMWJ78fFHKI9iPUw4LvG07coxoZmsU
2tjIuV77HGGH7qufQJQtEFo/aOBEbLZ4i1uef6nYasnsI6tV6jhFhcLvgj7KeJDK
HUzAD6zg6DKj2NaBf5DzROVlZSCz
-----END CERTIFICATE-----
52 changes: 26 additions & 26 deletions src/test/resources/ssl/reload/node-new.key.pem
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,28 +1,28 @@
-----BEGIN PRIVATE KEY-----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MIIEvgIBADANBgkqhkiG9w0BAQEFAASCBKgwggSkAgEAAoIBAQDkeSVy4oh5jSmO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-----END PRIVATE KEY-----
Loading