Sandro Bonazzola has submitted this change and it was merged. Change subject: packaging: setup: pki: Set subjectAltName ...................................................................... packaging: setup: pki: Set subjectAltName pki-enroll-request.sh is able to set the subjectAltName (SAN). The CA forum baseline requirements declares subjectAltName as required. Google Chrome seems to require the subjectAltName set in server certificates, and urllib3 generates warnings, if subjectaltName is not set. Change-Id: I022976407f0a8be14a6bde06da553c0d3348f7e7 Bug-Url: https://bugzilla.redhat.com/1449084 Signed-off-by: Dominik Holler <dholler(a)redhat.com&gt; --- M packaging/bin/pki-enroll-pkcs12.sh M packaging/bin/pki-enroll-request.sh M packaging/pki/cert.template.in M packaging/setup/plugins/ovirt-engine-setup/ovirt-engine/pki/ca.py 4 files changed, 35 insertions(+), 5 deletions(-) Approvals: Sandro Bonazzola: Looks good to me, approved Martin Peřina: Looks good to me, but someone else must approve Dominik Holler: Verified Jenkins CI: Passed CI tests Yedidyah Bar David: Looks good to me, but someone else must approve -- To view, visit https://gerrit.ovirt.org/74614 To unsubscribe, visit https://gerrit.ovirt.org/settings Gerrit-MessageType: merged Gerrit-Change-Id: I022976407f0a8be14a6bde06da553c0d3348f7e7 Gerrit-PatchSet: 6 Gerrit-Project: ovirt-engine Gerrit-Branch: master Gerrit-Owner: Dominik Holler <dholler(a)redhat.com&gt; Gerrit-Reviewer: Daniel Erez <derez(a)redhat.com&gt; Gerrit-Reviewer: Dominik Holler <dholler(a)redhat.com&gt; Gerrit-Reviewer: Ido Rosenzwig <irosenzw(a)redhat.com&gt; Gerrit-Reviewer: Jenkins CI Gerrit-Reviewer: Lev Veyde <lveyde(a)redhat.com&gt; Gerrit-Reviewer: Martin Peřina <mperina(a)redhat.com&gt; Gerrit-Reviewer: Nir Soffer <nsoffer(a)redhat.com&gt; Gerrit-Reviewer: Rafael Martins <rafael(a)rafaelmartins.eng.br&gt; Gerrit-Reviewer: Sandro Bonazzola <sbonazzo(a)redhat.com&gt; Gerrit-Reviewer: Simone Tiraboschi <stirabos(a)redhat.com&gt; Gerrit-Reviewer: Yedidyah Bar David <didi(a)redhat.com&gt; Gerrit-Reviewer: gerrit-hooks <automation(a)ovirt.org&gt;