[DRE-commits] [reel] 01/01: add x509v3 extension necessary for client cert authentication

[Micah Anderson]

This is an automated email from the git hooks/post-receive script.

micah pushed a commit to branch master
in repository reel.

commit 5f07caafb9467f6c3a4a9380f04c99fb6f81cfe1
Author: Micah Anderson <micah at riseup.net>
Date:   Mon Dec 5 21:04:12 2016 -0500

    add x509v3 extension necessary for client cert authentication
---
 debian/changelog                                       |  6 ++++++
 .../patches/0003-client-cert-x509v3-extension-in-spec  | 18 ++++++++++++++++++
 debian/patches/series                                  |  1 +
 3 files changed, 25 insertions(+)

diff --git a/debian/changelog b/debian/changelog
index 7860c36..bde0df7 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,9 @@
+reel (0.6.1-3) unstable; urgency=medium
+
+  * Patch: add x509v3 extension necessary for client cert authentication
+
+ -- Micah Anderson <micah at debian.org>  Mon, 05 Dec 2016 21:32:52 -0500
+
 reel (0.6.1-2) unstable; urgency=medium
 
   * Add ruby-certificate-authority as build dependency (Closes: #841704)
diff --git a/debian/patches/0003-client-cert-x509v3-extension-in-spec b/debian/patches/0003-client-cert-x509v3-extension-in-spec
new file mode 100644
index 0000000..b444622
--- /dev/null
+++ b/debian/patches/0003-client-cert-x509v3-extension-in-spec
@@ -0,0 +1,18 @@
+Description: New ruby-certificate-authority fails tests unless proper x509v3 extension is added for client certs
+Author: Micah Anderson <micah at debian.org>
+Forwarded: Yes
+Last-Update: 2016-12-05
+Index: reel/spec/support/create_certs.rb
+===================================================================
+--- reel.orig/spec/support/create_certs.rb	2016-12-05 21:22:04.111496054 -0500
++++ reel/spec/support/create_certs.rb	2016-12-05 21:23:33.401298728 -0500
+@@ -48,7 +48,8 @@
+ client_cert.serial_number.number = 1
+ client_cert.key_material.generate_key
+ client_cert.parent = ca
+-client_cert.sign!
++
++client_cert.sign! 'extensions' => { 'keyUsage' => { 'usage' => %w(digitalSignature) } }
+ 
+ client_cert_path = File.join(certs_dir, 'client.crt')
+ client_key_path  = File.join(certs_dir, 'client.key')
diff --git a/debian/patches/series b/debian/patches/series
index a741c2f..4045fc1 100644
--- a/debian/patches/series
+++ b/debian/patches/series
@@ -1,2 +1,3 @@
 0001-Fix-require-statements-in-specs.patch
 0002-Put-certificates-and-logs-to-tmp.patch
+0003-client-cert-x509v3-extension-in-spec

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-ruby-extras/reel.git