From 2de478f16ccfeea7a362d90474614ae4e72a2a41 Mon Sep 17 00:00:00 2001 From: Jordan Liggitt Date: Thu, 18 Dec 2014 15:13:29 -0500 Subject: [PATCH] Make cert CN unique to avoid certificate serial number clashes --- cluster/saltbase/salt/generate-cert/make-ca-cert.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/cluster/saltbase/salt/generate-cert/make-ca-cert.sh b/cluster/saltbase/salt/generate-cert/make-ca-cert.sh index 84ee7859a8..08af6f503d 100755 --- a/cluster/saltbase/salt/generate-cert/make-ca-cert.sh +++ b/cluster/saltbase/salt/generate-cert/make-ca-cert.sh @@ -61,7 +61,7 @@ tar xzf easy-rsa.tar.gz > /dev/null 2>&1 cd easy-rsa-master/easyrsa3 ./easyrsa init-pki > /dev/null 2>&1 -./easyrsa --batch build-ca nopass > /dev/null 2>&1 +./easyrsa --batch "--req-cn=$cert_ip@`date +%s`" build-ca nopass > /dev/null 2>&1 if [ $use_cn = "true" ]; then ./easyrsa build-server-full $cert_ip nopass > /dev/null 2>&1 cp -p pki/issued/$cert_ip.crt "${cert_dir}/server.cert" > /dev/null 2>&1