diff options
| author | Dan Prince <dan.prince@rackspace.com> | 2011-04-11 15:47:36 +0000 |
|---|---|---|
| committer | Tarmac <> | 2011-04-11 15:47:36 +0000 |
| commit | 729bb7a320acf37b3c6994d4dcefbaa9e52693e0 (patch) | |
| tree | f34086eba4c38be6b07b2f6770a81b419d595d7f | |
| parent | 8ae129ace401a1493cd953d3f4b9ecc22d74a70f (diff) | |
| parent | decdaa30acb15e088eb6a0ca3ebc8ea6f377cbfe (diff) | |
Set default stateOrProvice to 'supplied' in openssl.cnf.tmpl.
This resolves a stateOrProvince printable string UTF8 mismatch on
RHEL 6 and Fedora 14 (using openssl-1.0.0-4.el6.x86_64 or
openssl-1.0.0d-1.fc14.x86_64).
Fixes x509 certificate generation on Fedora 14 and Redhat 6.
| -rw-r--r-- | nova/CA/openssl.cnf.tmpl | 6 |
1 files changed, 5 insertions, 1 deletions
diff --git a/nova/CA/openssl.cnf.tmpl b/nova/CA/openssl.cnf.tmpl index dd81f1c2b..b80fadf40 100644 --- a/nova/CA/openssl.cnf.tmpl +++ b/nova/CA/openssl.cnf.tmpl @@ -41,9 +41,13 @@ nameopt = default_ca certopt = default_ca policy = policy_match +# NOTE(dprince): stateOrProvinceName must be 'supplied' or 'optional' to +# work around a stateOrProvince printable string UTF8 mismatch on +# RHEL 6 and Fedora 14 (using openssl-1.0.0-4.el6.x86_64 or +# openssl-1.0.0d-1.fc14.x86_64) [ policy_match ] countryName = match -stateOrProvinceName = match +stateOrProvinceName = supplied organizationName = optional organizationalUnitName = optional commonName = supplied |