teleport

opensource/teleport

Fork 0

mirror of https://github.com/gravitational/teleport.git synced 2026-11-03 07:40:28 +08:00

Files

T

History

Nic KlaassenandEdoardo Spadolini 1efa0ae77c fix: tolerate mismatched key PEM headers (#46725 )

* fix: tolerate mismatched key PEM headers

Issue #43381 introduced a regression where we now fail to parse PKCS8
encoded RSA private keys within an "RSA PRIVATE KEY" PEM block in
some cases.
This format is somewhat non-standard, usually PKCS8 data should be in a
"PRIVATE KEY" PEM block. However, certain versions of OpenSSL and
possibly even Teleport in specific cases have generated private keys in
this format.

This commit updates ParsePrivateKey and ParsePublicKey to be more
tolerant of PKCS8, PKCS1, or PKIX key data no matter which PEM header is
used.

Fixes #46710

changelog: fixed regression in private key parser to handle mismatched PEM headers

* fix typo in comment

Co-authored-by: Edoardo Spadolini <edoardo.spadolini@goteleport.com>

---------

Co-authored-by: Edoardo Spadolini <edoardo.spadolini@goteleport.com>

2024-09-18 19:20:43 +00:00

hardwaresigner_test.go

Client check for YubiKey private key touch/pin policies (#32264 )

2023-09-29 00:10:05 +00:00

hardwaresigner.go

Hardware key serial number attestation (#37728 )

2024-02-10 01:07:58 +00:00

policy_test.go

Enable hardware key support in the WebUI (#32781 )

2023-10-13 19:59:11 +00:00

policy.go

fix: Forbid SSO users from logging in using passwordless (#41062 )