Resolving an issue where we don't check to see if unrepeatedSans exists before using it #12417
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Summary
#12255
Technical notes summary
First note:
This issue doesn't require the user to filter anything on the list page. The page just needs to contain a tls cert secret with a special format.
Second note:
This one has been difficult to reproduce due to my lack of knowledge in certs. It looks like you need to have a cert with a specially formed SANs to get this issue to reproduce. I artificially reproduced this issue using this key, cert (unused) and made a diff to the model.
MyKey.key
MyCertificate.crt
Areas or cases that should be tested
Secrets list page
Checklist