summaryrefslogtreecommitdiff
path: root/nova/CA
Commit message (Collapse)AuthorAgeFilesLines
* Make tests use sha256 as openssl default digest algorithmDavanum Srinivas2015-02-091-2/+2
| | | | | | | | | | | | | | The tests previously used md5, which is considered broken, and distros are starting to disable this in their openssl builds. Make the tests use sha256 as the default as a long term sane alternative that should work on all distros. This will fix Centos 7, and future proof the tests. Closes-Bug: #1399498 Change-Id: Ic6cc92e47a318d789db3c3c98c67948eefb51fc2
* Clean up crypto.pyVishvananda Ishaya2012-01-181-36/+0
| | | | | | | | * Remove chained certs since we don't use them * Make get_vpn use the existing generate call instead of shell script * (Bonus: we can revoke vpn certs now) Change-Id: I8e118c5bd3dee6ba7c6a2a1390874b69008c436b
* reduce policy for countynameLvov Maxim2011-05-031-1/+1
|
* make geninter.sh use the right tmpl fileVishvananda Ishaya2011-04-191-1/+1
|
* Set default stateOrProvice to 'supplied' in openssl.cnf.tmpl.Dan Prince2011-04-081-1/+5
| | | | | | | | This resolves a stateOrProvince printable string UTF8 mismatch on RHEL 6 and Fedora 14 (using openssl-1.0.0-4.el6.x86_64 or openssl-1.0.0d-1.fc14.x86_64). Fixes x509 certificate generation on Fedora 14 and Redhat 6.
* Automatically create CA state dir, and make sure the CA scripts look for the ↵Soren Hansen2011-04-052-2/+3
| | | | templates in the right places.
* Allow CA code and state to be separated, and make sure CA code gets ↵Soren Hansen2011-04-0511-0/+207
installed by setup.py install.