From d98da14c27538bf17a7ae4e235af853fa790d670 Mon Sep 17 00:00:00 2001 From: Jeff Mitchell Date: Fri, 4 May 2018 10:08:23 -0400 Subject: [PATCH] Fix alias data being used for cert auth (serial number -> common name) (#4495) Fixes #4475 --- builtin/credential/cert/path_login.go | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/builtin/credential/cert/path_login.go b/builtin/credential/cert/path_login.go index 65e06b987b69..dac7611c3655 100644 --- a/builtin/credential/cert/path_login.go +++ b/builtin/credential/cert/path_login.go @@ -90,6 +90,7 @@ func (b *backend) pathLogin(ctx context.Context, req *logical.Request, data *fra Metadata: map[string]string{ "cert_name": matched.Entry.Name, "common_name": clientCerts[0].Subject.CommonName, + "serial_number": clientCerts[0].SerialNumber.String(), "subject_key_id": certutil.GetHexFormatted(clientCerts[0].SubjectKeyId, ":"), "authority_key_id": certutil.GetHexFormatted(clientCerts[0].AuthorityKeyId, ":"), }, @@ -99,7 +100,7 @@ func (b *backend) pathLogin(ctx context.Context, req *logical.Request, data *fra MaxTTL: matched.Entry.MaxTTL, }, Alias: &logical.Alias{ - Name: clientCerts[0].SerialNumber.String(), + Name: clientCerts[0].Subject.CommonName, }, }, }