mtls-cli

mtls-cli copied to clipboard

Bumps [cryptography](https://github.com/pyca/cryptography) from 36.0.1 to 39.0.1. Changelog Sourced from cryptography's changelog. 39.0.1 - 2023-02-07 * **SECURITY ISSUE** - Fixed a bug where ``Cipher.update_into`` accepted Python buffer protocol objects, but allowed...

dependabot[bot]

Bumps [certifi](https://github.com/certifi/python-certifi) from 2021.10.8 to 2022.12.7. Commits 9e9e840 2022.12.07 b81bdb2 2022.09.24 939a28f 2022.09.14 aca828a 2022.06.15.2 de0eae1 Only use importlib.resources's new files() / Traversable API on Python ≥3.11 ... b8eb5e9 2022.06.15.1...

dependabot[bot]

drGrove

Instead of loading the certificate into the browser store and all the incompatibilites and annoyances that comes with, I think mtls-cli could be implemented as a PKCS#11 library: Browsers support...

james-callahan

Possible bug in in `_has_root_cert`

1

I added some debug prints: ``` def _has_root_cert(self): if sys.platform == "darwin": name = self.ca_cert_file_path else: name = "{server} Root CA".format(server=self.server) print("Vaild cert? ") print(self.check_valid_cert(name, usage="CT,T,T", is_root=True)) if self.check_valid_cert(name, usage="CT,T,T",...

dpc

Use cryptographically secure random source for password generation

3

Issue: [B311:blacklist] Standard pseudo-random generators are not suitable for security/cryptographic purposes. - Severity: Low - Confidence: High - Location: mtls/mtls.py:448 - More Info: https://bandit.readthedocs.io/en/latest/blacklists/blacklist_calls.html#b311-random ``` 447 for c in range(10):...

daurnimator

Currently when an untrusted PGP key is used to encrypt the Certificate RSA key, the underlying system fully ignores the key and writes an empty file because the interaction with...

drGrove

Using with logcli

2

How can I use [logcli](https://github.com/grafana/loki/blob/master/docs/sources/getting-started/logcli.md) to access a loki instance behind mtls? Loki supports the env vars: - LOKI_CA_CERT_PATH - LOKI_CLIENT_CERT_PATH - LOKI_CLIENT_KEY_PATH So the right wrapper/alias should work?

daurnimator

Add macports support so that macports can handle getting updates

drGrove

We should have a package in debian to get latest updates.

drGrove