db292165c5
Keys are generated in astute prehook and saved in master node for further use. In current implementation only one key for haproxy is generated and then it will be used for all public OpenStack URLs. If self-signed certificates are created then new astute prehook task added will copy those certificates to apropriate nodes. Also this change adds new ssl modular task that checks if user uploaded certificate exists and saves it from yaml to local node filesystem. Implements: blueprint ssl-endpoints Depends-On: I2261dcfb55743b0fb31f4cbe42e7793176c8e1c0 Change-Id: Ifcd9194b51129ea262363196a9963a96cc5760bb
20 lines
371 B
INI
20 lines
371 B
INI
[ req ]
|
|
default_bits = 2048
|
|
default_keyfile = keyfile.key
|
|
distinguished_name = req_distinguished_name
|
|
prompt = no
|
|
req_extensions = v3_req
|
|
|
|
[ req_distinguished_name ]
|
|
CN = US
|
|
ST = California
|
|
L = Mountain View
|
|
O = Mirantis
|
|
OU = Mirantis Deploy Team
|
|
CN = ${ENV::SSL_CN_NAME}
|
|
emailAddress = root@fuel.local
|
|
|
|
[ v3_req ]
|
|
basicConstraints = CA:FALSE
|
|
subjectKeyIdentifier = hash
|