Supply more sane SSL certificate defaults

Want to enable spinning up a development environment quickly.

Increasing the countryName_max SSL configuration did not allow a country
name of 'Example Country Code' to be used when generating a certificate.

Prefer to revert back to the original value for countryName_max and
supply shorter parameters for certificate generation.

Change challengePassword_max to be consistent with the other limits.

Signed-off-by: George T Kramer <george.t.kramer@intel.com>
This commit is contained in:
George T Kramer
2019-11-20 15:53:27 -08:00
parent a3beebdd8f
commit 999632937b
2 changed files with 8 additions and 8 deletions

View File

@@ -65,7 +65,7 @@ string_mask = MASK:0x2002
[req_distinguished_name]
countryName = Country Name (2 letter code)
countryName_min = 2
countryName_max = 64
countryName_max = 2
stateOrProvinceName = State or Province Name (full name)
localityName = Locality Name (eg, city)
0.organizationName = Organization Name (eg, company)
@@ -77,8 +77,8 @@ emailAddress_max = 64
[req_attributes]
challengePassword = A challenge password
challengePassword_min = 4
challengePassword_max = 128
challengePassword_min = 8
challengePassword_max = 64
unstructuredName = An optional company name
[usr_cert]

View File

@@ -11,11 +11,11 @@ export KOJI_URL=https://"$KOJI_MASTER_FQDN"
export KOJID_CAPACITY=16
export TAG_NAME=clear
# Use for koji SSL certificates
export COUNTRY_CODE='Example Country Code'
export STATE='Example State'
export LOCATION='Example Location'
export ORGANIZATION='Example Organization'
export ORG_UNIT='Example Org Unit'
export COUNTRY_CODE='EX'
export STATE='Example'
export LOCATION='Example'
export ORGANIZATION='Example'
export ORG_UNIT='Example'
# Use for importing existing RPMs
export RPM_ARCH='x86_64'
export SRC_RPM_DIR=