Alon Bar-Lev has posted comments on this change.

Change subject: pki: comply with rfc2459 UTCTime restriction
......................................................................


Patch Set 1:

(1 comment)

https://gerrit.ovirt.org/#/c/39738/1/packaging/bin/pki-create-ca.sh
File packaging/bin/pki-create-ca.sh:

Line 78:                        -keyfile private/ca.pem \
Line 79:                        -selfsign \
Line 80:                        -subj "${subject}" \
Line 81:                        -days 3650 \
Line 82:                        -startdate "$(date --utc --date "now -1 days" 
+"%y%m%d%H%M%S%z" | sed 's/+0000/Z/')"
> Why not simply:
indeed!
Line 83:        ) || die "Cannot enroll CA certificate"
Line 84: 
Line 85:        openssl x509 -in "${PKIDIR}/ca.pem" -out 
"${PKIDIR}/certs/ca.der" || die "Cannot read CA certificate"
Line 86: 


-- 
To view, visit https://gerrit.ovirt.org/39738
To unsubscribe, visit https://gerrit.ovirt.org/settings

Gerrit-MessageType: comment
Gerrit-Change-Id: Ie7440b5918090fce595a237a4be861b2a7400b74
Gerrit-PatchSet: 1
Gerrit-Project: ovirt-engine
Gerrit-Branch: master
Gerrit-Owner: Alon Bar-Lev <alo...@redhat.com>
Gerrit-Reviewer: Alon Bar-Lev <alo...@redhat.com>
Gerrit-Reviewer: Oved Ourfali <oourf...@redhat.com>
Gerrit-Reviewer: Sandro Bonazzola <sbona...@redhat.com>
Gerrit-Reviewer: Yedidyah Bar David <d...@redhat.com>
Gerrit-Reviewer: automat...@ovirt.org
Gerrit-Reviewer: oVirt Jenkins CI Server
Gerrit-HasComments: Yes
_______________________________________________
Engine-patches mailing list
Engine-patches@ovirt.org
http://lists.ovirt.org/mailman/listinfo/engine-patches

Reply via email to