Change in ovirt-engine[master]: pki: accept subject name for certificate

yzaslavs at redhat.com yzaslavs at redhat.com
Mon Nov 19 11:58:36 UTC 2012


Yair Zaslavsky has submitted this change and it was merged.

Change subject: pki: accept subject name for certificate
......................................................................


pki: accept subject name for certificate

This enables generating a completely empty certificate request, setting
subject at engine machine.

This much safer (security wise) and much easier to handle at host during
bootstrap.

Bug-Url: https://bugzilla.redhat.com/show_bug.cgi?id=875528
Change-Id: I9798deff39a69f9fd25c0ab9e998b5a7b206daeb
Signed-off-by: Alon Bar-Lev <alonbl at redhat.com>
---
M backend/manager/conf/ca/SignReq.sh
M backend/manager/modules/bll/src/main/java/org/ovirt/engine/core/bll/VdsInstaller.java
M backend/manager/modules/utils/src/main/java/org/ovirt/engine/core/utils/hostinstall/OpenSslCAWrapper.java
3 files changed, 37 insertions(+), 14 deletions(-)

Approvals:
  Alon Bar-Lev: Verified
  Yair Zaslavsky: Looks good to me, approved


--
To view, visit http://gerrit.ovirt.org/9163
To unsubscribe, visit http://gerrit.ovirt.org/settings

Gerrit-MessageType: merged
Gerrit-Change-Id: I9798deff39a69f9fd25c0ab9e998b5a7b206daeb
Gerrit-PatchSet: 5
Gerrit-Project: ovirt-engine
Gerrit-Branch: master
Gerrit-Owner: Alon Bar-Lev <alonbl at redhat.com>
Gerrit-Reviewer: Allon Mureinik <amureini at redhat.com>
Gerrit-Reviewer: Alon Bar-Lev <alonbl at redhat.com>
Gerrit-Reviewer: Barak Azulay <bazulay at redhat.com>
Gerrit-Reviewer: Douglas Schilling Landgraf <dougsland at redhat.com>
Gerrit-Reviewer: Juan Hernandez <juan.hernandez at redhat.com>
Gerrit-Reviewer: Yair Zaslavsky <yzaslavs at redhat.com>



More information about the Engine-commits mailing list