HomePhorge

(#2848) Set `certdnsnames` values into the CSR.
66101f13b781Unpublished

Unpublished Commit ยท Learn More

Repository Importing: This repository is still importing.

Description

(#2848) Set certdnsnames values into the CSR.

We were incorrectly applying the certdnsnames setting when a certificate was
signed, not when a CSR was generated. This would misapply the server setting
to all nodes in the infrastructure, rather than applying the client-supplied
version.

This commit adds certdnsnames to the CSR, allowing the client to pass their
desired set of names to the CA to be propagated into the final certificate.

It does not alter the behaviour when the certificate is generated.

Signed-off-by: Daniel Pittman <daniel@puppetlabs.com>

Details

Provenance
Daniel Pittman <daniel@puppetlabs.com>Authored on
Nick Lewis <nick@puppetlabs.com>Committed on Oct 22 2011, 12:51 AM
vanmeeuwenPushed on Jun 2 2015, 2:22 PM
Parents
rPU77b814f45823: (#6928) Don't blow up when the method is undefined...
Branches
Unknown
Tags
Unknown

Event Timeline

Nick Lewis <nick@puppetlabs.com> committed rPU66101f13b781: (#2848) Set `certdnsnames` values into the CSR. (authored by Daniel Pittman <daniel@puppetlabs.com>).Oct 22 2011, 12:51 AM