Wrong openssl.cnf configuration prevents curl to resolve DNS name from SAN field

Bug #1525330 reported by Stanislaw Bogatkin
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Fuel for OpenStack
Fix Released
High
Stanislaw Bogatkin
6.1.x
Won't Fix
Undecided
Stanislaw Bogatkin
7.0.x
Won't Fix
Undecided
Stanislaw Bogatkin

Bug Description

In openssl.cnf we had had two CN fields. Last of them overlap first one. When we move DNS name from CN to SAN, first one began used too. We should change this behavior.

Tags: area-library
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to fuel-library (master)

Fix proposed to branch: master
Review: https://review.openstack.org/256595

Changed in fuel:
status: New → In Progress
Revision history for this message
Stanislaw Bogatkin (sbogatkin) wrote :

Previous versions not affected, cause we used CN instead of SAN.

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to fuel-library (master)

Reviewed: https://review.openstack.org/256595
Committed: https://git.openstack.org/cgit/openstack/fuel-library/commit/?id=3ea2f4be65a11e879c3b3d48772c0af2286275d9
Submitter: Jenkins
Branch: master

commit 3ea2f4be65a11e879c3b3d48772c0af2286275d9
Author: Stanislaw Bogatkin <email address hidden>
Date: Fri Dec 11 20:17:45 2015 +0300

    Change wrong field name in openssl config

    US should be used as 'C'ountry field, not as 'C'ommon 'N'ame.

    Change-Id: Idbbf7696b09aec585d2fa0730e9e27b5b668d805
    Closes-Bug: #1525330

Changed in fuel:
status: In Progress → Fix Committed
Ilya Kutukov (ikutukov)
tags: added: area-library
tags: added: on-verification
Revision history for this message
Andrey Sledzinskiy (asledzinskiy) wrote :

verified on 8.0-506

Changed in fuel:
status: Fix Committed → Fix Released
tags: removed: on-verification
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.