-
Notifications
You must be signed in to change notification settings - Fork 4.4k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
introduce certopts #9606
introduce certopts #9606
Conversation
77db4a6
to
b2678b8
Compare
|
||
// generate leaf | ||
serial, err := tlsutil.GenerateSerialNumber() | ||
signer, _, err := tlsutil.GeneratePrivateKey() |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I think I forgot to fix this one in CAOpts
: the same signer needs to be used for CA and certs.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM!
@i0rek is there anything else you would like to add here? |
b2678b8
to
e117682
Compare
@freddygv I revisited the PR and did it all over again. Should be good now. |
🍒 If backport labels were added before merging, cherry-picking will start automatically. To retroactively trigger a backport after merging, add backport labels and re-run https://circleci.com/gh/hashicorp/consul/341317. |
🍒✅ Cherry pick of commit 53e9c13 onto |
* introduce cert opts * it should be using the same signer * lint and omit serial
🍒✅ Cherry pick of commit 53e9c13 onto |
* introduce cert opts * it should be using the same signer * lint and omit serial
* introduce cert opts * it should be using the same signer * lint and omit serial
I liked
CAOpts
from #9585 so much that I addedCertOpts
as well.