From d81c195407c8a0922140e6d845e00a084d6f81e2 Mon Sep 17 00:00:00 2001 From: Ian Cordasco Date: Tue, 9 Jun 2015 22:15:20 -0500 Subject: [PATCH] Generate a SHA-2 certificate for Horizon SHA-1 certificates are being deprecated and browsers are starting to issue warnings about their use. We should begin generating SHA-2 certificates for Horizon. Closes-bug: 1461983 Change-Id: I7f1933680e2859e007f6b8be262852b164f90b33 --- playbooks/roles/os_horizon/tasks/horizon_ssl_key_create.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/playbooks/roles/os_horizon/tasks/horizon_ssl_key_create.yml b/playbooks/roles/os_horizon/tasks/horizon_ssl_key_create.yml index c235860930..f400fa5a8b 100644 --- a/playbooks/roles/os_horizon/tasks/horizon_ssl_key_create.yml +++ b/playbooks/roles/os_horizon/tasks/horizon_ssl_key_create.yml @@ -23,7 +23,7 @@ - name: Create self-signed ssl cert command: > - openssl req -new -nodes -x509 -subj + openssl req -new -nodes -sha256 -x509 -subj "/C=US/ST=Texas/L=San Antonio/O=IT/CN={{ horizon_server_name }}" -days 3650 -keyout {{ horizon_ssl_key }}