mirror of
https://github.com/slackhq/nebula.git
synced 2025-12-06 02:30:57 -08:00
`func (nc *NebulaCertificate) VerifyPrivateKey(key []byte) error` would previously return an error even if passed the correct private key for a CA certificate `nc`. That function has been updated to support CA certificates, and nebula-cert now calls it before signing a new certificate. Previously, it would perform all constraint checks against the CA certificate provided, take a SHA256 fingerprint of the provided certificate, insert it into the new node certificate, and then finally sign it with the mismatching private key provided. |
||
|---|---|---|
| .. | ||
| nebula | ||
| nebula-cert | ||
| nebula-service | ||