[ovirt-devel] [missing_subjectAltName] in engine ca certificate?

[Nir Soffer]

I imported the certificate from my engine into chrome[1], but Chrome
refuses to use it because:

    This server could not prove that it is ...; its security
    certificate is from [missing_subjectAltName].

Same certificate used to work 2 weeks ago, looks like new Chrome
version changed the rules.

Without importing engine CA, there is no way to upload images
via engine.

Tested on engine 4.1.1 and 4.1.2 on Centos 7.3.

Is this  known issue?

[1] from http://
<engine_url>/ovirt-engine/services/pki-resource?resource=ca-certificate&format=X509-PEM-CA

Nir
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ovirt.org/pipermail/devel/attachments/20170507/42ab9b25/attachment-0001.html>