Skip to content

Commit 7608caf

Browse files
thomassagaborigloi
authored andcommitted
CP-24904: Omit IP SubjectAltNames from TLS certs
When autogenerating a self-signed TLS certificate, the Subject Alternative Names section no longer contains IP subjects, only DNS. Signed-off-by: Thomas Sanders <[email protected]>
1 parent 5ba30cf commit 7608caf

File tree

1 file changed

+0
-7
lines changed

1 file changed

+0
-7
lines changed

scripts/generate_ssl_cert

Lines changed: 0 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -19,7 +19,6 @@ if [ -e ${FILE} ]; then
1919
fi
2020

2121
dnsnames=$((hostname -A; hostname -f) | sort | uniq)
22-
addresses=$(hostname -I | sort | uniq)
2322
2423
DIR=$(mktemp -d tls-cert-generation-XXXXXXXXXX --tmpdir)
2524
@@ -52,12 +51,6 @@ do
5251
let i=i+1
5352
echo "DNS.${i}=${x}" >> config
5453
done
55-
i=0
56-
for x in $addresses
57-
do
58-
let i=i+1
59-
echo "IP.${i}=${x}" >> config
60-
done
6154
6255
openssl genrsa 1024 > privkey.rsa
6356

0 commit comments

Comments
 (0)