Skip to content

K
k3s
Commit 3f926e94 authored by Daniel Smith's avatar Daniel Smith
Browse files
Options

Merge pull request #3036 from liggitt/cert_cn

Make cert CN unique to avoid certificate serial number clashes
parents af571a23 2de478f1
Hide whitespace changes
Inline Side-by-side
Showing with 1 addition and 1 deletion
cluster/saltbase/salt/generate-cert/make-ca-cert.sh
View file @ 3f926e94
...@@ -61,7 +61,7 @@ tar xzf easy-rsa.tar.gz > /dev/null 2>&1 ...@@ -61,7 +61,7 @@ tar xzf easy-rsa.tar.gz > /dev/null 2>&1
cd easy-rsa-master/easyrsa3 cd easy-rsa-master/easyrsa3
./easyrsa init-pki > /dev/null 2>&1 ./easyrsa init-pki > /dev/null 2>&1
./easyrsa --batch build-ca nopass > /dev/null 2>&1 ./easyrsa --batch "--req-cn=$cert_ip@`date +%s`" build-ca nopass > /dev/null 2>&1
if [ $use_cn = "true" ]; then if [ $use_cn = "true" ]; then
./easyrsa build-server-full $cert_ip nopass > /dev/null 2>&1 ./easyrsa build-server-full $cert_ip nopass > /dev/null 2>&1
cp -p pki/issued/$cert_ip.crt "${cert_dir}/server.cert" > /dev/null 2>&1 cp -p pki/issued/$cert_ip.crt "${cert_dir}/server.cert" > /dev/null 2>&1
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment