Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

GetCertificateCN(): if the CN is missing, fall back to the DNS SAN #9889

Draft
wants to merge 1 commit into
base: master
Choose a base branch
from
Draft

GetCertificateCN(): if the CN is missing, fall back to the DNS SAN #9889

wants to merge 1 commit into from

Commits on Jul 3, 2024

  1. GetCertificateCN(): if the CN is missing, fall back to the DNS SAN 

    if exactly one is given and use it as CN.

Currently Icinga 2 populates both the DNS SAN and the subject CN of a newly
issued certificate with the endpoint name. But the CN is limited to 64
characters. So endpoint names are. The only clean solution is omitting the
CN for too long names. Icinga 2 must be able to extract the endpoint name
from such certificates in the first place and exactly one DNS SAN is a legit
source.
    @Al2Klimov
    Al2Klimov committed Jul 3, 2024
    Configuration menu
    Copy the full SHA
    6797af1 View commit details
    Browse the repository at this point in the history