Stormshield KMaaS 4.6.0 fixes

PKI module

The version of the certificates generated by the PKI module is now correct. It is now x509 v3 instead of x509 v1.

---

The PKI module now supports the keyIdentifier field of the AuthorityKeyIdentifier extension in the CA certificate.

---

The PKI module now correctly checks the values associated to the SubjectAlternativeName field of a certificate. They must be either DNS names or IP addresses.

Key Access Management and Crypto API

The verify log related to policy verification is no longer issued if this verification is disabled.

---

In the Key Access Management and Crypto API modules, if the encrypted_data field of the /decrypt route is empty, the correct log is now issued.

OPA rules

The containerType OPA input for the wrapprivatekey route has been replaced by contentType. Make sure to modify your OPA rules accordingly if they include the containerType input.