Add duplicate removal for Common Names

Author: hslatman

policy.go

@@ -11,12 +11,14 @@ func (p *Policy) Deduplicate() {
 			allow.Ips = removeDuplicates(allow.Ips)
 			allow.Emails = removeDuplicates(allow.Emails)
 			allow.Uris = removeDuplicates(allow.Uris)
+			allow.CommonNames = removeDuplicates(allow.CommonNames)
 		}
 		if deny := p.GetX509().GetDeny(); deny != nil {
 			deny.Dns = removeDuplicates(deny.Dns)
 			deny.Ips = removeDuplicates(deny.Ips)
 			deny.Emails = removeDuplicates(deny.Emails)
 			deny.Uris = removeDuplicates(deny.Uris)
+			deny.CommonNames = removeDuplicates(deny.CommonNames)
 		}
 	}
 	if ssh := p.GetSsh(); ssh != nil {

policy_test.go

@@ -54,32 +54,36 @@ func TestPolicy_Deduplicate(t *testing.T) {
 			policy: &Policy{
 				X509: &X509Policy{
 					Allow: &X509Names{
-						Dns:    []string{"*.local", "*.example.com", "*.local"},
-						Ips:    []string{"192.168.0.0/24", "10.10.10.0/24", "192.168.0.0/24"},
-						Emails: []string{"@example.com", "@local", "@example.com"},
-						Uris:   []string{"*.local", "*.example.com", "*.local"},
+						Dns:         []string{"*.local", "*.example.com", "*.local"},
+						Ips:         []string{"192.168.0.0/24", "10.10.10.0/24", "192.168.0.0/24"},
+						Emails:      []string{"@example.com", "@local", "@example.com"},
+						Uris:        []string{"*.local", "*.example.com", "*.local"},
+						CommonNames: []string{"bla", "host", "bla"},
 					},
 					Deny: &X509Names{
-						Dns:    []string{"*.local", "*.example.com", "*.local"},
-						Ips:    []string{"192.168.0.0/24", "10.10.10.0/24", "192.168.0.0/24"},
-						Emails: []string{"@example.com", "@local", "@example.com"},
-						Uris:   []string{"*.local", "*.example.com", "*.local"},
+						Dns:         []string{"*.local", "*.example.com", "*.local"},
+						Ips:         []string{"192.168.0.0/24", "10.10.10.0/24", "192.168.0.0/24"},
+						Emails:      []string{"@example.com", "@local", "@example.com"},
+						Uris:        []string{"*.local", "*.example.com", "*.local"},
+						CommonNames: []string{"bla", "host", "bla"},
 					},
 				},
 			},
 			expected: &Policy{
 				X509: &X509Policy{
 					Allow: &X509Names{
-						Dns:    []string{"*.local", "*.example.com"},
-						Ips:    []string{"192.168.0.0/24", "10.10.10.0/24"},
-						Emails: []string{"@example.com", "@local"},
-						Uris:   []string{"*.local", "*.example.com"},
+						Dns:         []string{"*.local", "*.example.com"},
+						Ips:         []string{"192.168.0.0/24", "10.10.10.0/24"},
+						Emails:      []string{"@example.com", "@local"},
+						Uris:        []string{"*.local", "*.example.com"},
+						CommonNames: []string{"bla", "host"},
 					},
 					Deny: &X509Names{
-						Dns:    []string{"*.local", "*.example.com"},
-						Ips:    []string{"192.168.0.0/24", "10.10.10.0/24"},
-						Emails: []string{"@example.com", "@local"},
-						Uris:   []string{"*.local", "*.example.com"},
+						Dns:         []string{"*.local", "*.example.com"},
+						Ips:         []string{"192.168.0.0/24", "10.10.10.0/24"},
+						Emails:      []string{"@example.com", "@local"},
+						Uris:        []string{"*.local", "*.example.com"},
+						CommonNames: []string{"bla", "host"},
 					},
 				},
 			},