[plugins] make pem certificate regexp stricter

This allow to apply do_*_private_sub() without fearing false positive. Going through RFCs, PEM and OpenPGP use `-----BEGIN`, and only RFC4716 has a sligtly different syntax `---- BEGIN SSH2 PUBLIC KEY ----`. Signed-off-by: Etienne Champetier <[email protected]>
sosreport · Jun 13, 2024 · 21527d7 · 21527d7
1 parent f9f52dc
commit 21527d7
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/sos/report/plugins/__init__.py b/sos/report/plugins/__init__.py
@@ -67,7 +67,7 @@ def _node_type(st):
     return ''
 
 
-_certmatch = re.compile("-*BEGIN.*?-*END", re.DOTALL)
+_certmatch = re.compile("----(?:-| )BEGIN.*?----(?:-| )END", re.DOTALL)
 _cert_replace = "-----SCRUBBED"