Commit 2fea00e9 authored by Thomas Gambier's avatar Thomas Gambier 🚴🏼 Committed by Łukasz Nowak

Simpler OID in generated certificates

As many softwares doesn't support 128 bits long arc in OID (see
https://misc.daniel-marschall.de/asn.1/oid_facts.html#chap4), we
registered a simpler OID through https://oidplus.viathinksoft.com).

OID 1.3.6.1.4.1.37476.9000.70 is for Nexedi (https://oidref.com/1.3.6.1.4.1.37476.9000.70).
OID 1.3.6.1.4.1.37476.9000.70.0 is for Caucase (https://oidref.com/1.3.6.1.4.1.37476.9000.70.0).
parent 7a737172
......@@ -63,7 +63,7 @@ from caucase.storage import SQLite3Storage
_cryptography_backend = default_backend()
NOT_CAUCASE_OID = '2.25.285541874270823339875695650038637483518'
NOT_CAUCASE_OID = '1.3.6.1.4.1.37476.9000.70.1'
A_YEAR_IN_SECONDS = 60 * 60 * 24 * 365 # Roughly a year
class assertHTMLNoScriptAlert(HTMLParser.HTMLParser):
......
......@@ -55,8 +55,8 @@ del _checkDefaultDigestsAvailable
_cryptography_backend = default_backend()
# Registration-less OID under 2.25 tree (aka uuid tree)
CAUCASE_OID_TOP = '2.25.285541874270823339875695650038637483517'
# Registration-less OID under 1.3.6.1.4.1.37476.9000 tree (aka ViaThinkSoft tree for open source project)
CAUCASE_OID_TOP = '1.3.6.1.4.1.37476.9000.70.0'
CAUCASE_OID_AUTO_SIGNED = CAUCASE_OID_TOP + '.0'
# Reserved for tests: no meaning, always stripped but never specificaly
# checked for in the code.
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment