openstack
/
nova
Code Issues Proposed changes

Set default stateOrProvice to 'supplied' in openssl.cnf.tmpl. 

This resolves a stateOrProvince printable string UTF8 mismatch on
RHEL 6 and Fedora 14 (using openssl-1.0.0-4.el6.x86_64 or
openssl-1.0.0d-1.fc14.x86_64).

Fixes x509 certificate generation on Fedora 14 and Redhat 6.
This commit is contained in:
Dan Prince 2011-04-08 12:22:09 -04:00
parent 13d55f9b29
commit decdaa30ac
1 changed files with 5 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
nova/CA/openssl.cnf.tmpl
View File

@ -41,9 +41,13 @@ nameopt = default_ca
certopt = default_ca
policy = policy_match
# NOTE(dprince): stateOrProvinceName must be 'supplied' or 'optional' to
# work around a stateOrProvince printable string UTF8 mismatch on
# RHEL 6 and Fedora 14 (using openssl-1.0.0-4.el6.x86_64 or
# openssl-1.0.0d-1.fc14.x86_64)
[ policy_match ]
countryName = match
stateOrProvinceName = match
stateOrProvinceName = supplied
organizationName = optional
organizationalUnitName = optional
commonName = supplied