Affected by GO-2022-0578 and 18 other vulnerabilities

GO-2022-0578: Incorrect Privilege Assignment in HashiCorp Vault in github.com/hashicorp/vault

GO-2022-0611: HashiCorp Vault Incorrect Permission Assignment for Critical Resource in github.com/hashicorp/vault

GO-2022-0618: Hashicorp Vault Privilege Escalation Vulnerability in github.com/hashicorp/vault

GO-2022-1021: HashiCorp Vault vulnerable to incorrect metadata access in github.com/hashicorp/vault

GO-2023-1685: HashiCorp Vault’s Microsoft SQL Database Storage Backend Vulnerable to SQL Injection Via Configuration File in github.com/hashicorp/vault

GO-2023-1708: HashiCorp Vault's PKI mount vulnerable to denial of service in github.com/hashicorp/vault

GO-2023-1849: Hashicorp Vault vulnerable to Cross-site Scripting in github.com/hashicorp/vault

GO-2023-1897: HashiCorp Vault's revocation list not respected in github.com/hashicorp/vault

GO-2023-1900: Hashicorp Vault Fails to Verify if Approle SecretID Belongs to Role During a Destroy Operation in github.com/hashicorp/vault

GO-2023-1986: HashiCorp Vault and Vault Enterprise vulnerable to user enumeration in github.com/hashicorp/vault

GO-2023-2063: HashiCorp Vault Improper Input Validation vulnerability in github.com/hashicorp/vault

GO-2023-2088: Hashicorp Vault Incorrect Permission Assignment for Critical Resource vulnerability in github.com/hashicorp/vault

GO-2023-2329: HashiCorp Vault Missing Release of Memory after Effective Lifetime vulnerability in github.com/hashicorp/vault

GO-2024-2617: Authentication bypass in github.com/hashicorp/vault

GO-2024-2690: HashiCorpVault does not correctly validate OCSP responses in github.com/hashicorp/vault

GO-2024-2921: HashiCorp Vault Incorrectly Validated JSON Web Tokens (JWT) Audience Claims in github.com/hashicorp/vault

GO-2024-3162: Vault SSH Secrets Engine Configuration Did Not Restrict Valid Principals By Default in github.com/hashicorp/vault

GO-2024-3191: Vault Community Edition privilege escalation vulnerability in github.com/hashicorp/vault

GO-2024-3246: Hashicorp Vault vulnerable to denial of service through memory exhaustion in github.com/hashicorp/vault

certhelpers

package

v1.8.2 Latest Latest Go to latest Published: Aug 26, 2021 License: MPL-2.0 Imports: 14 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/hashicorp/vault

Links

Open Source Insights

Documentation ¶

Index ¶

type CertBuilder
type CertOpt
type Certificate
- func NewCert(t *testing.T, opts ...CertOpt) (cert Certificate)
- func (cert Certificate) CombinedPEM() []byte
- func (cert Certificate) PrivateKeyPEM() []byte
type KeyWrapper
- func NewPrivateKey(t *testing.T) (key KeyWrapper)

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

This section is empty.

Types ¶

type CertBuilder ¶

type CertBuilder struct {
	// contains filtered or unexported fields
}

type CertOpt ¶

type CertOpt func(*CertBuilder) error

func CommonName ¶

func CommonName(cn string) CertOpt

func DNS ¶

func DNS(dns ...string) CertOpt

func IP ¶

func IP(ip ...string) CertOpt

func IsCA ¶

func IsCA(isCA bool) CertOpt

func Parent ¶

func Parent(parent Certificate) CertOpt

func SelfSign ¶

func SelfSign() CertOpt

type Certificate ¶

type Certificate struct {
	PrivKey  KeyWrapper
	Template *x509.Certificate
	TLSCert  tls.Certificate
	RawCert  []byte
	Pem      []byte
	IsCA     bool
}

//////////////////////////////////////////////////////////////////////////// Certificate ////////////////////////////////////////////////////////////////////////////

func NewCert ¶

func NewCert(t *testing.T, opts ...CertOpt) (cert Certificate)

func (Certificate) CombinedPEM ¶

func (cert Certificate) CombinedPEM() []byte

func (Certificate) PrivateKeyPEM ¶

func (cert Certificate) PrivateKeyPEM() []byte

type KeyWrapper ¶

type KeyWrapper struct {
	PrivKey *rsa.PrivateKey
	Pem     []byte
}

//////////////////////////////////////////////////////////////////////////// Private Key ////////////////////////////////////////////////////////////////////////////

func NewPrivateKey ¶

func NewPrivateKey(t *testing.T) (key KeyWrapper)

Source Files ¶

View all Source files

cert_helpers.go

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL