[ovirt-devel] [missing_subjectAltName] in engine ca certificate?

[Dan Kenigsberg]

On Sun, May 7, 2017 at 8:22 PM, Nir Soffer <nsoffer at redhat.com> wrote:
> I imported the certificate from my engine into chrome[1], but Chrome
> refuses to use it because:
>
>     This server could not prove that it is ...; its security
>     certificate is from [missing_subjectAltName].
>
> Same certificate used to work 2 weeks ago, looks like new Chrome
> version changed the rules.
>
> Without importing engine CA, there is no way to upload images
> via engine.
>
> Tested on engine 4.1.1 and 4.1.2 on Centos 7.3.
>
> Is this  known issue?
>
> [1] from
> http://<engine_url>/ovirt-engine/services/pki-resource?resource=ca-certificate&format=X509-PEM-CA
>
> Nir

https://gerrit.ovirt.org/#/c/74614/

"This patch is not yet working, but can be used for discussion."