Always set commonName in X509 certificates
authorManuel Franceschini <livewire@google.com>
Mon, 19 Jul 2010 19:07:57 +0000 (21:07 +0200)
committerManuel Franceschini <livewire@google.com>
Wed, 21 Jul 2010 09:34:01 +0000 (11:34 +0200)
commit600535f0cffc11b5455ac5657cee1f680ebc547c
treeb08b014d0b1fa101f3c246af41377bd5c092c5cc
parent05cd934d9225641f6ea3282036eaa629cce35361
Always set commonName in X509 certificates

Due to the current switch of the RPC client to PycURL, a bug with newer
versions of libcurl surfaced. When the 'Subject' or 'Issuer' of
'server.pem' were empty, SSL handshake failed.

This patch changes the certificate generation functions such that they
always use "ganeti.example.com" as commonName (CN) for 'Subject' and
'Issuer'.

Signed-off-by: Manuel Franceschini <livewire@google.com>
Reviewed-by: Iustin Pop <iustin@google.com>
lib/bootstrap.py
lib/constants.py
lib/utils.py