summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
-rw-r--r--nova/CA/openssl.cnf.tmpl6
1 files changed, 5 insertions, 1 deletions
diff --git a/nova/CA/openssl.cnf.tmpl b/nova/CA/openssl.cnf.tmpl
index dd81f1c2b..b80fadf40 100644
--- a/nova/CA/openssl.cnf.tmpl
+++ b/nova/CA/openssl.cnf.tmpl
@@ -41,9 +41,13 @@ nameopt = default_ca
certopt = default_ca
policy = policy_match
+# NOTE(dprince): stateOrProvinceName must be 'supplied' or 'optional' to
+# work around a stateOrProvince printable string UTF8 mismatch on
+# RHEL 6 and Fedora 14 (using openssl-1.0.0-4.el6.x86_64 or
+# openssl-1.0.0d-1.fc14.x86_64)
[ policy_match ]
countryName = match
-stateOrProvinceName = match
+stateOrProvinceName = supplied
organizationName = optional
organizationalUnitName = optional
commonName = supplied