On Wed, Jun 11, 2014 at 02:48:16PM +0200, 'Helga Velroyen' via ganeti-devel wrote: > This fixes bug 853, which was rather subtle: When adding > nodes with a different openssl library than the master > node, the SSL server certificate could be encoded > differently from the master node. This caused > 'gnt-cluster verify' to complain about differing > 'server.pem' files although all certificates would > work and private keys could be matched sucessfully > to the public part of the certificate. > > This patch does two things: > - It checks if the encoded versions of the certificate > differ and if yes, an error is logged. > - It writes exactly the file to disk that it receives > from the master node so that file inconsistency > is prevented. > > Signed-off-by: Helga Velroyen <[email protected]> > --- > lib/tools/node_daemon_setup.py | 12 ++++++++++-- > 1 file changed, 10 insertions(+), 2 deletions(-)
LGTM. Thanks. -- Klaus Aehlig Google Germany GmbH, Dienerstr. 12, 80331 Muenchen Registergericht und -nummer: Hamburg, HRB 86891 Sitz der Gesellschaft: Hamburg Geschaeftsfuehrer: Graham Law, Christine Elizabeth Flores
