Merge "Don't use ipv6 for DNS SAN fields with python3"

This commit is contained in:
Zuul 2018-10-16 17:30:29 +00:00 committed by Gerrit Code Review
commit 86db593653
1 changed files with 7 additions and 3 deletions

10
lib/tls
View File

@ -227,9 +227,13 @@ function init_CA {
function init_cert {
if [[ ! -r $DEVSTACK_CERT ]]; then
if [[ -n "$TLS_IP" ]]; then
# Lie to let incomplete match routines work
# see https://bugs.python.org/issue23239
TLS_IP="DNS:$TLS_IP,IP:$TLS_IP"
if python3_enabled; then
TLS_IP="IP:$TLS_IP"
else
# Lie to let incomplete match routines work with python2
# see https://bugs.python.org/issue23239
TLS_IP="DNS:$TLS_IP,IP:$TLS_IP"
fi
fi
make_cert $INT_CA_DIR $DEVSTACK_CERT_NAME $DEVSTACK_HOSTNAME "$TLS_IP"