diff --git a/pkg/clientcert/certificate.go b/pkg/clientcert/certificate.go index 189e832fb..84e7fbb6c 100644 --- a/pkg/clientcert/certificate.go +++ b/pkg/clientcert/certificate.go @@ -4,7 +4,6 @@ import ( "crypto/x509/pkix" "errors" "fmt" - "reflect" "strings" "time" @@ -84,14 +83,6 @@ func IsCertificateValid(certData []byte, subject *pkix.Name) (bool, error) { if cert.Subject.CommonName != subject.CommonName { continue } - - if !reflect.DeepEqual(cert.Subject.Organization, subject.Organization) { - continue - } - - if !reflect.DeepEqual(cert.Subject.OrganizationalUnit, subject.OrganizationalUnit) { - continue - } return true, nil } diff --git a/pkg/clientcert/certificate_test.go b/pkg/clientcert/certificate_test.go index 3658d1771..50f9cfa57 100644 --- a/pkg/clientcert/certificate_test.go +++ b/pkg/clientcert/certificate_test.go @@ -138,28 +138,6 @@ func TestIsCertificateValid(t *testing.T) { CommonName: "wrong-common-name", }, }, - { - name: "invalid organization", - testCert: testinghelpers.NewTestCertWithSubject(pkix.Name{ - CommonName: "test", - Organization: []string{"a", "b"}, - }, 60*time.Second), - subject: &pkix.Name{ - CommonName: "test", - Organization: []string{"c"}, - }, - }, - { - name: "invalid organizational unit", - testCert: testinghelpers.NewTestCertWithSubject(pkix.Name{ - CommonName: "test", - OrganizationalUnit: []string{"x"}, - }, 60*time.Second), - subject: &pkix.Name{ - CommonName: "test", - OrganizationalUnit: []string{"y", "z"}, - }, - }, { name: "valid cert", testCert: testinghelpers.NewTestCertWithSubject(pkix.Name{