Remove FF gate for improved CA generation

This commit is contained in:
Michael B. Gale
2026-02-24 11:25:57 +00:00
parent c4dca28336
commit 83c236af2b
16 changed files with 15 additions and 130 deletions

View File

@@ -161595,11 +161595,6 @@ var featureConfig = {
envVar: "CODEQL_ACTION_IGNORE_GENERATED_FILES",
minimumVersion: void 0
},
["improved_proxy_certificates" /* ImprovedProxyCertificates */]: {
defaultValue: false,
envVar: "CODEQL_ACTION_IMPROVED_PROXY_CERTIFICATES",
minimumVersion: void 0
},
["java_network_debugging" /* JavaNetworkDebugging */]: {
defaultValue: false,
envVar: "CODEQL_ACTION_JAVA_NETWORK_DEBUGGING",

5
lib/analyze-action.js generated
View File

@@ -107706,11 +107706,6 @@ var featureConfig = {
envVar: "CODEQL_ACTION_IGNORE_GENERATED_FILES",
minimumVersion: void 0
},
["improved_proxy_certificates" /* ImprovedProxyCertificates */]: {
defaultValue: false,
envVar: "CODEQL_ACTION_IMPROVED_PROXY_CERTIFICATES",
minimumVersion: void 0
},
["java_network_debugging" /* JavaNetworkDebugging */]: {
defaultValue: false,
envVar: "CODEQL_ACTION_JAVA_NETWORK_DEBUGGING",

View File

@@ -103996,11 +103996,6 @@ var featureConfig = {
envVar: "CODEQL_ACTION_IGNORE_GENERATED_FILES",
minimumVersion: void 0
},
["improved_proxy_certificates" /* ImprovedProxyCertificates */]: {
defaultValue: false,
envVar: "CODEQL_ACTION_IMPROVED_PROXY_CERTIFICATES",
minimumVersion: void 0
},
["java_network_debugging" /* JavaNetworkDebugging */]: {
defaultValue: false,
envVar: "CODEQL_ACTION_JAVA_NETWORK_DEBUGGING",

View File

@@ -165073,11 +165073,6 @@ var featureConfig = {
envVar: "CODEQL_ACTION_IGNORE_GENERATED_FILES",
minimumVersion: void 0
},
["improved_proxy_certificates" /* ImprovedProxyCertificates */]: {
defaultValue: false,
envVar: "CODEQL_ACTION_IMPROVED_PROXY_CERTIFICATES",
minimumVersion: void 0
},
["java_network_debugging" /* JavaNetworkDebugging */]: {
defaultValue: false,
envVar: "CODEQL_ACTION_JAVA_NETWORK_DEBUGGING",

5
lib/init-action.js generated
View File

@@ -105223,11 +105223,6 @@ var featureConfig = {
envVar: "CODEQL_ACTION_IGNORE_GENERATED_FILES",
minimumVersion: void 0
},
["improved_proxy_certificates" /* ImprovedProxyCertificates */]: {
defaultValue: false,
envVar: "CODEQL_ACTION_IMPROVED_PROXY_CERTIFICATES",
minimumVersion: void 0
},
["java_network_debugging" /* JavaNetworkDebugging */]: {
defaultValue: false,
envVar: "CODEQL_ACTION_JAVA_NETWORK_DEBUGGING",

View File

@@ -103987,11 +103987,6 @@ var featureConfig = {
envVar: "CODEQL_ACTION_IGNORE_GENERATED_FILES",
minimumVersion: void 0
},
["improved_proxy_certificates" /* ImprovedProxyCertificates */]: {
defaultValue: false,
envVar: "CODEQL_ACTION_IMPROVED_PROXY_CERTIFICATES",
minimumVersion: void 0
},
["java_network_debugging" /* JavaNetworkDebugging */]: {
defaultValue: false,
envVar: "CODEQL_ACTION_JAVA_NETWORK_DEBUGGING",

View File

@@ -103896,11 +103896,6 @@ var featureConfig = {
envVar: "CODEQL_ACTION_IGNORE_GENERATED_FILES",
minimumVersion: void 0
},
["improved_proxy_certificates" /* ImprovedProxyCertificates */]: {
defaultValue: false,
envVar: "CODEQL_ACTION_IMPROVED_PROXY_CERTIFICATES",
minimumVersion: void 0
},
["java_network_debugging" /* JavaNetworkDebugging */]: {
defaultValue: false,
envVar: "CODEQL_ACTION_JAVA_NETWORK_DEBUGGING",

View File

@@ -161001,11 +161001,6 @@ var featureConfig = {
envVar: "CODEQL_ACTION_IGNORE_GENERATED_FILES",
minimumVersion: void 0
},
["improved_proxy_certificates" /* ImprovedProxyCertificates */]: {
defaultValue: false,
envVar: "CODEQL_ACTION_IMPROVED_PROXY_CERTIFICATES",
minimumVersion: void 0
},
["java_network_debugging" /* JavaNetworkDebugging */]: {
defaultValue: false,
envVar: "CODEQL_ACTION_JAVA_NETWORK_DEBUGGING",

View File

@@ -120688,11 +120688,6 @@ var featureConfig = {
envVar: "CODEQL_ACTION_IGNORE_GENERATED_FILES",
minimumVersion: void 0
},
["improved_proxy_certificates" /* ImprovedProxyCertificates */]: {
defaultValue: false,
envVar: "CODEQL_ACTION_IMPROVED_PROXY_CERTIFICATES",
minimumVersion: void 0
},
["java_network_debugging" /* JavaNetworkDebugging */]: {
defaultValue: false,
envVar: "CODEQL_ACTION_JAVA_NETWORK_DEBUGGING",
@@ -121829,7 +121824,8 @@ var CERT_SUBJECT = [
value: "San Francisco"
}
];
var extraExtensions = [
var allExtensions = [
{ name: "basicConstraints", cA: true },
{
name: "keyUsage",
critical: true,
@@ -121840,7 +121836,7 @@ var extraExtensions = [
{ name: "subjectKeyIdentifier" },
{ name: "authorityKeyIdentifier", keyIdentifier: true }
];
function generateCertificateAuthority(newCertGenFF) {
function generateCertificateAuthority() {
const keys = import_node_forge.pki.rsa.generateKeyPair(KEY_SIZE);
const cert = import_node_forge.pki.createCertificate();
cert.publicKey = keys.publicKey;
@@ -121852,16 +121848,8 @@ function generateCertificateAuthority(newCertGenFF) {
);
cert.setSubject(CERT_SUBJECT);
cert.setIssuer(CERT_SUBJECT);
const extensions = [{ name: "basicConstraints", cA: true }];
if (newCertGenFF) {
extensions.push(...extraExtensions);
}
cert.setExtensions(extensions);
if (newCertGenFF) {
cert.sign(keys.privateKey, import_node_forge.md.sha256.create());
} else {
cert.sign(keys.privateKey);
}
cert.setExtensions(allExtensions);
cert.sign(keys.privateKey, import_node_forge.md.sha256.create());
const pem = import_node_forge.pki.certificateToPem(cert);
const key = import_node_forge.pki.privateKeyToPem(keys.privateKey);
return { cert: pem, key };
@@ -122138,9 +122126,7 @@ async function run(startedAt) {
);
}
}
const ca = generateCertificateAuthority(
await features.getValue("improved_proxy_certificates" /* ImprovedProxyCertificates */)
);
const ca = generateCertificateAuthority();
const proxyConfig = {
all_credentials: credentials,
ca

5
lib/upload-lib.js generated
View File

@@ -107155,11 +107155,6 @@ var featureConfig = {
envVar: "CODEQL_ACTION_IGNORE_GENERATED_FILES",
minimumVersion: void 0
},
["improved_proxy_certificates" /* ImprovedProxyCertificates */]: {
defaultValue: false,
envVar: "CODEQL_ACTION_IMPROVED_PROXY_CERTIFICATES",
minimumVersion: void 0
},
["java_network_debugging" /* JavaNetworkDebugging */]: {
defaultValue: false,
envVar: "CODEQL_ACTION_JAVA_NETWORK_DEBUGGING",

View File

@@ -161163,11 +161163,6 @@ var featureConfig = {
envVar: "CODEQL_ACTION_IGNORE_GENERATED_FILES",
minimumVersion: void 0
},
["improved_proxy_certificates" /* ImprovedProxyCertificates */]: {
defaultValue: false,
envVar: "CODEQL_ACTION_IMPROVED_PROXY_CERTIFICATES",
minimumVersion: void 0
},
["java_network_debugging" /* JavaNetworkDebugging */]: {
defaultValue: false,
envVar: "CODEQL_ACTION_JAVA_NETWORK_DEBUGGING",

View File

@@ -106880,11 +106880,6 @@ var featureConfig = {
envVar: "CODEQL_ACTION_IGNORE_GENERATED_FILES",
minimumVersion: void 0
},
["improved_proxy_certificates" /* ImprovedProxyCertificates */]: {
defaultValue: false,
envVar: "CODEQL_ACTION_IMPROVED_PROXY_CERTIFICATES",
minimumVersion: void 0
},
["java_network_debugging" /* JavaNetworkDebugging */]: {
defaultValue: false,
envVar: "CODEQL_ACTION_JAVA_NETWORK_DEBUGGING",