From Tal Nisan <tnisan(a)redhat.com>:
Tal Nisan has submitted this change and it was merged.
Change subject: packaging: setup: pki: Set subjectAltName
......................................................................
packaging: setup: pki: Set subjectAltName
pki-enroll-request.sh is able to set the subjectAltName (SAN).
The CA forum baseline requirements declares subjectAltName
as required. Google Chrome seems to require the subjectAltName set
in server certificates, and urllib3 generates warnings, if
subjectaltName is not set.
Change-Id: I022976407f0a8be14a6bde06da553c0d3348f7e7
Bug-Url:
https://bugzilla.redhat.com/1449084
Signed-off-by: Dominik Holler <dholler(a)redhat.com>
(cherry picked from commit d8a8f85cb642e6c02d5358322404328be3a260b1)
---
M packaging/bin/pki-enroll-pkcs12.sh
M packaging/bin/pki-enroll-request.sh
M packaging/pki/cert.template.in
M packaging/setup/plugins/ovirt-engine-setup/ovirt-engine/pki/ca.py
4 files changed, 35 insertions(+), 5 deletions(-)
Approvals:
Sandro Bonazzola: Looks good to me, approved
Dominik Holler: Verified
Jenkins CI: Passed CI tests
Yedidyah Bar David: Looks good to me, but someone else must approve
--
To view, visit
https://gerrit.ovirt.org/76656
To unsubscribe, visit
https://gerrit.ovirt.org/settings
Gerrit-MessageType: merged
Gerrit-Change-Id: I022976407f0a8be14a6bde06da553c0d3348f7e7
Gerrit-PatchSet: 1
Gerrit-Project: ovirt-engine
Gerrit-Branch: ovirt-engine-4.1
Gerrit-Owner: Dominik Holler <dholler(a)redhat.com>
Gerrit-Reviewer: Dominik Holler <dholler(a)redhat.com>
Gerrit-Reviewer: Jenkins CI
Gerrit-Reviewer: Piotr Kliczewski <piotr.kliczewski(a)gmail.com>
Gerrit-Reviewer: Sandro Bonazzola <sbonazzo(a)redhat.com>
Gerrit-Reviewer: Tal Nisan <tnisan(a)redhat.com>
Gerrit-Reviewer: Yedidyah Bar David <didi(a)redhat.com>