Infra
/
lemur
5
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Adding support for private DigiCert certificates (#835)

This commit is contained in:
Asbjørn Kjær 2017-06-14 09:20:24 -07:00 committed by kevgliss
parent e77382864b
commit 35cc7ef8d7
2 changed files with 11 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
docs/administration.rst
View File

@ -466,6 +466,11 @@ The following configuration properties are required to use the Digicert issuer p
This is the default validity (in years), if no end date is specified. (Default: 1) This is the default validity (in years), if no end date is specified. (Default: 1)
.. data:: DIGICERT_PRIVATE
:noindex:
This is whether or not to issue a private certificate. (Default: False)
CFSSL Issuer Plugin CFSSL Issuer Plugin
^^^^^^^^^^^^^^^^^^^ ^^^^^^^^^^^^^^^^^^^

6
lemur/plugins/lemur_digicert/plugin.py
View File

@ -126,6 +126,12 @@ def map_fields(options, csr):
else: else:
data['custom_expiration_date'] = options['validity_end'].format('YYYY-MM-DD') data['custom_expiration_date'] = options['validity_end'].format('YYYY-MM-DD')
if current_app.config.get('DIGICERT_PRIVATE', False):
if 'product' in data:
data['product']['type_hint'] = 'private'
else:
data['product'] = dict(type_hint='private')
return data return data