4443a53b88
OpenSSL certificate should default to FQDN if possible. Using IP addresses is not recommended, complicates dual stack and limits addressing flexibility. IPv6 control plane implementation [1] follow-up. [1] Ia34e6916ea4f99e9522cd2ddde03a0a4776f7e2c Change-Id: Ibfc02f933ddcc170e9d616d401e294ba0ff5e981
21 lines
431 B
Django/Jinja
21 lines
431 B
Django/Jinja
[req]
|
|
distinguished_name = req_distinguished_name
|
|
req_extensions = v3_req
|
|
|
|
[req_distinguished_name]
|
|
countryName = US
|
|
stateOrProvinceName = NC
|
|
localityName = RTP
|
|
organizationalUnitName = kolla
|
|
commonName = {{ kolla_external_fqdn }}
|
|
|
|
[v3_req]
|
|
subjectAltName = @alt_names
|
|
|
|
[alt_names]
|
|
{% if kolla_external_fqdn != kolla_external_vip_address %}
|
|
DNS.1 = {{ kolla_external_fqdn }}
|
|
{% else %}
|
|
IP.1 = {{ kolla_external_fqdn }}
|
|
{% endif %}
|