Updates:
Status: Fixed
Comment #1 on issue 853 by [email protected]: SSL keys with different
encodings cause certificate inconsistencies
http://code.google.com/p/ganeti/issues/detail?id=853
Fixed with:
commit 9179f383991ab0c6ee7c38d881d9b8a26ca75128
Author: Helga Velroyen <[email protected]>
Date: Wed Jun 11 14:24:47 2014 +0200
Check for SSL encoding inconsistencies
This fixes bug 853, which was rather subtle: When adding
nodes with a different openssl library than the master
node, the SSL server certificate could be encoded
differently from the master node. This caused
'gnt-cluster verify' to complain about differing
'server.pem' files although all certificates would
work and private keys could be matched sucessfully
to the public part of the certificate.
This patch does two things:
- It checks if the encoded versions of the certificate
differ and if yes, an error is logged.
- It writes exactly the file to disk that it receives
from the master node so that file inconsistency
is prevented.
Signed-off-by: Helga Velroyen <[email protected]>
Reviewed-by: Klaus Aehlig <[email protected]>
--
You received this message because this project is configured to send all
issue notifications to this address.
You may adjust your notification preferences at:
https://code.google.com/hosting/settings
