Bug #19447: Broken short hostname in agent certificate - Rudder - Issue Tracker

Actions

Copy link

Bug #19447

closed

Broken short hostname in agent certificate

Added by Alexis Mousset over 3 years ago. Updated over 3 years ago.

Status:

Released

Priority:

N/A

Assignee:

Benoît PECCATTE

Category:

Packaging

Target version:

6.1.14

Pull Request:

https://github.com/Normation/rudder/p...

Severity:

UX impact:

User visibility:

Effort required:

Priority:

Name check:

To do

Fix check:

Checked

Regression:

Description

INFO: No usable SSL certificate detected for Rudder relay HTTPS support, generating one automatically...++ hostname --fqdn
+ MACHINE_NAME=server.rudder.local
++ cut -b 63
++ echo server.rudder.local
+ SHORT_NAME=
+ SUBJALTNAME=DNS:server.rudder.local
+ openssl req -new -batch -x509 -newkey rsa:2048 -subj /C=FR/ST=France/L=Paris/CN=/emailAddress=root@server.rudder.local/ -keyout /opt/rudder/etc/ssl/rudder.key -out /opt/rudder/etc/ssl/rudder.crt -days 1460 -nodes -sha256 -config /opt/rudder/etc/ssl/openssl.cnf -extensions server_cert
Generating a RSA private key
.............+++++
..........................................+++++
writing new private key to '/opt/rudder/etc/ssl/rudder.key'
-----
problems making Certificate Request
139977381753280:error:0D07A098:asn1 encoding routines:ASN1_mbstring_ncopy:string too short:../crypto/asn1/a_mbstr.c:100:minsize=1