Change in ovirt-engine[ovirt-engine-4.1]: packaging: setup: pki: Set subjectAltName

Code Review gerrit at ovirt.org
Wed May 10 14:05:45 UTC 2017


>From Tal Nisan <tnisan at redhat.com>:

Tal Nisan has submitted this change and it was merged.

Change subject: packaging: setup: pki: Set subjectAltName
......................................................................


packaging: setup: pki: Set subjectAltName

pki-enroll-request.sh is able to set the subjectAltName (SAN).

The CA forum baseline requirements declares subjectAltName
as required. Google Chrome seems to require the subjectAltName set
in server certificates, and urllib3 generates warnings, if
subjectaltName is not set.

Change-Id: I022976407f0a8be14a6bde06da553c0d3348f7e7
Bug-Url: https://bugzilla.redhat.com/1449084
Signed-off-by: Dominik Holler <dholler at redhat.com>
(cherry picked from commit d8a8f85cb642e6c02d5358322404328be3a260b1)
---
M packaging/bin/pki-enroll-pkcs12.sh
M packaging/bin/pki-enroll-request.sh
M packaging/pki/cert.template.in
M packaging/setup/plugins/ovirt-engine-setup/ovirt-engine/pki/ca.py
4 files changed, 35 insertions(+), 5 deletions(-)

Approvals:
  Sandro Bonazzola: Looks good to me, approved
  Dominik Holler: Verified
  Jenkins CI: Passed CI tests
  Yedidyah Bar David: Looks good to me, but someone else must approve



-- 
To view, visit https://gerrit.ovirt.org/76656
To unsubscribe, visit https://gerrit.ovirt.org/settings

Gerrit-MessageType: merged
Gerrit-Change-Id: I022976407f0a8be14a6bde06da553c0d3348f7e7
Gerrit-PatchSet: 1
Gerrit-Project: ovirt-engine
Gerrit-Branch: ovirt-engine-4.1
Gerrit-Owner: Dominik Holler <dholler at redhat.com>
Gerrit-Reviewer: Dominik Holler <dholler at redhat.com>
Gerrit-Reviewer: Jenkins CI
Gerrit-Reviewer: Piotr Kliczewski <piotr.kliczewski at gmail.com>
Gerrit-Reviewer: Sandro Bonazzola <sbonazzo at redhat.com>
Gerrit-Reviewer: Tal Nisan <tnisan at redhat.com>
Gerrit-Reviewer: Yedidyah Bar David <didi at redhat.com>


More information about the Engine-commits mailing list