Commit Graph

8 Commits

Author SHA1 Message Date
Stephen Finucane 44935e9bc2 ca: Remove 'nova/CA' directory
These scripts were only used by functions that were removed in [1]. They
can therefore be removed.

[1] Ie1dadc6bf935f777e0cd0c54a0a21b79545714c5

Change-Id: I1b573bf0e4a6a21232c5f8443ad30c531b26c1b1
2018-03-08 10:27:54 +00:00
Davanum Srinivas f4495de5a0 Make tests use sha256 as openssl default digest algorithm
The tests previously used md5, which is considered broken,
and distros are starting to disable this in their openssl
builds.

Make the tests use sha256 as the default as a long term
sane alternative that should work on all distros.

This will fix Centos 7, and future proof the tests.

Closes-Bug: #1399498
Change-Id: Ic6cc92e47a318d789db3c3c98c67948eefb51fc2
2015-02-09 10:06:04 -05:00
Vishvananda Ishaya 1eba47cff9 Clean up crypto.py
* Remove chained certs since we don't use them
 * Make get_vpn use the existing generate call instead of shell script
 * (Bonus: we can revoke vpn certs now)

Change-Id: I8e118c5bd3dee6ba7c6a2a1390874b69008c436b
2012-01-18 21:56:14 -08:00
Lvov Maxim 3dc9cbfd4f reduce policy for countyname 2011-05-03 21:16:58 +04:00
Vishvananda Ishaya 4442d8f701 make geninter.sh use the right tmpl file 2011-04-19 10:20:56 -07:00
Dan Prince decdaa30ac Set default stateOrProvice to 'supplied' in openssl.cnf.tmpl.
This resolves a stateOrProvince printable string UTF8 mismatch on
RHEL 6 and Fedora 14 (using openssl-1.0.0-4.el6.x86_64 or
openssl-1.0.0d-1.fc14.x86_64).

Fixes x509 certificate generation on Fedora 14 and Redhat 6.
2011-04-08 12:22:09 -04:00
Soren Hansen d7013c9617 Automatically create CA state dir, and make sure the CA scripts look for the templates in the right places. 2011-04-05 13:16:12 +02:00
Soren Hansen ff23dd2a3b Allow CA code and state to be separated, and make sure CA code gets installed by setup.py install. 2011-04-05 11:42:14 +02:00