nebula/cmd
John Maguire 34d002d695
Check CA cert and key match in nebula-cert sign (#503)
`func (nc *NebulaCertificate) VerifyPrivateKey(key []byte) error` would
previously return an error even if passed the correct private key for a
CA certificate `nc`.

That function has been updated to support CA certificates, and
nebula-cert now calls it before signing a new certificate. Previously,
it would perform all constraint checks against the CA certificate
provided, take a SHA256 fingerprint of the provided certificate, insert
it into the new node certificate, and then finally sign it with the
mismatching private key provided.
2021-10-01 12:43:33 -04:00
..
nebula Don't use a global logger (#423) 2021-03-26 09:46:30 -05:00
nebula-cert Check CA cert and key match in nebula-cert sign (#503) 2021-10-01 12:43:33 -04:00
nebula-service Minor windows focused improvements (#443) 2021-04-30 15:04:47 -05:00