Skip to content

Commit

Permalink
Disable verification for Puppet 6 certificate chain
Browse files Browse the repository at this point in the history
Hey @Magisus, think I could get a little help encrypting/decrypting properly with the new certificate chain so that I don't have to disable verification like this?
  • Loading branch information
binford2k committed Jan 16, 2019
1 parent cb5e0e8 commit f10a7c4
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion lib/puppet_x/binford2k/node_encrypt.rb
Original file line number Diff line number Diff line change
Expand Up @@ -47,7 +47,7 @@ def self.decrypt(data)
decrypted = blob.decrypt(key, cert)
verified = OpenSSL::PKCS7.new(decrypted)

unless verified.verify(nil, store, nil, OpenSSL::PKCS7::NOCHAIN)
unless verified.verify(nil, store, nil, OpenSSL::PKCS7::NOVERIFY)
raise ArgumentError, 'Signature verification failed'
end
verified.data
Expand Down

0 comments on commit f10a7c4

Please sign in to comment.