gsadmin/rustfs
1
0
Fork 0
mirror of https://github.com/rustfs/rustfs.git synced 2026-09-07 20:46:11 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(connect): sync protocol fixture consumers (#7167)

Browse Source 
* fix(connect): sync protocol fixture consumers

* fix(connect): preserve enrollment validation order

* fix(connect): satisfy base64 length lint

* fix(connect): restore signature validation order

* fix(connect): preserve signature precedence across chain parsing

* fix(connect): preserve signature error classification

* test(ci): provide log path in workflow harness
This commit is contained in:
Zhengchao An
2026-09-06 10:12:51 +08:00
committed by GitHub
parent 07833379b4
commit 5dca076efe
13 changed files with 754 additions and 58 deletions
Download Patch File Download Diff File Expand all files Collapse all files
protocol/agent/v1/fixtures/registration/error-codes.json
+8
View File
@@ -60,6 +60,14 @@
"definedBy": "protocol/agent/v1/registration-proof.md",
"note": "Separate from CERTIFICATE_REQUEST_MALFORMED because the request is structurally fine and the refusal is a policy one: ADR 0008 fixes the device key and this surface may not widen it."
},
{
"reason": "CERTIFICATE_REQUEST_PROFILE_UNSUPPORTED",
"httpStatus": 400,
"status": "INVALID_ARGUMENT",
"meaning": "The CSR subject or a typed subject alternative name cannot round-trip through the pinned stock step-ca JWK authorization strings without changing its ASN.1 type.",
"definedBy": "protocol/agent/v1/registration-proof.md",
"note": "Stable and non-retryable. No SAN is valid and is the RustFS-generated profile. IP, absolute URI, email containing @, and remaining DNS strings are valid only in their matching GeneralName choice. These names authorize the CSR key only; the issued CN and sole URI SAN still come only from Connect's assigned device uid."
},
{
"reason": "REGISTRATION_TOKEN_UNUSABLE",
"httpStatus": 401,