commit d25523555268e31c3b2ae9b87b43aceaeac61675
Author: Andy Ning <email address hidden>
Date: Tue Aug 25 09:31:20 2020 -0400
Add subjectAltName to admin endpoint certificate
Currently admin endpoint certificate in DC system doesn't have
subjectAltName. This will cause sysinv command like
"system --os-auth-url <subcloud admin endpoint> --os-region-name
<subcloud> host-list" to generate warning message, that the certificate
has no "subjectAltName" and falling back to check "commonName".
More information can found in RFC2818 regarding to commonName and
subjectAltName in certificate verification.
Change-Id: I7c2d857e209bacfa2dea5d40cf4bcaaa648b1b04
Closes-Bug: 1886708
Signed-off-by: Andy Ning <email address hidden>
Reviewed: https:/ /review. opendev. org/747971 /git.openstack. org/cgit/ starlingx/ ansible- playbooks/ commit/ ?id=d2552355526 8e31c3b2ae9b87b 43aceaeac61675
Committed: https:/
Submitter: Zuul
Branch: master
commit d25523555268e31 c3b2ae9b87b43ac eaeac61675
Author: Andy Ning <email address hidden>
Date: Tue Aug 25 09:31:20 2020 -0400
Add subjectAltName to admin endpoint certificate
Currently admin endpoint certificate in DC system doesn't have
subjectAltName. This will cause sysinv command like
"system --os-auth-url <subcloud admin endpoint> --os-region-name
<subcloud> host-list" to generate warning message, that the certificate
has no "subjectAltName" and falling back to check "commonName".
More information can found in RFC2818 regarding to commonName and
subjectAltName in certificate verification.
Change-Id: I7c2d857e209bac fa2dea5d40cf4bc aaa648b1b04
Closes-Bug: 1886708
Signed-off-by: Andy Ning <email address hidden>