HomePhorge

(#2848) Set `certdnsnames` values into the CSR.
d64b01b1a2ddUnpublished

Unpublished Commit ยท Learn More

Repository Importing: This repository is still importing.

Description

(#2848) Set certdnsnames values into the CSR.

We were incorrectly applying the certdnsnames setting when a certificate was
signed, not when a CSR was generated. This would misapply the server setting
to all nodes in the infrastructure, rather than applying the client-supplied
version.

This commit adds certdnsnames to the CSR, allowing the client to pass their
desired set of names to the CA to be propagated into the final certificate.

It does not alter the behaviour when the certificate is generated.

Signed-off-by: Daniel Pittman <daniel@puppetlabs.com>

Details

Provenance
Daniel Pittman <daniel@puppetlabs.com>Authored on
Nick Lewis <nick@puppetlabs.com>Committed on Oct 21 2011, 7:12 PM
vanmeeuwenPushed on Jun 2 2015, 2:22 PM
Parents
rPU78a01a253e44: (#6928) Don't blow up when the method is undefined...
Branches
Unknown
Tags
Unknown

Event Timeline

Nick Lewis <nick@puppetlabs.com> committed rPUd64b01b1a2dd: (#2848) Set `certdnsnames` values into the CSR. (authored by Daniel Pittman <daniel@puppetlabs.com>).Oct 21 2011, 7:12 PM