From: Ben Pfaff Date: Tue, 29 Jun 2010 21:58:05 +0000 (-0700) Subject: ovs-pki: Allow generating certificates with duplicate subjects. X-Git-Url: https://pintos-os.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=c6c9e1e36fdd9fe05e3d08a5e8fcceca13efd58a;p=openvswitch ovs-pki: Allow generating certificates with duplicate subjects. Without this setting, the certificate authorities that ovs-pki creates will not allow two switches or two controllers to have the same name. This causes problem in testing, since it's often convenient to test with short, common names like "tmp". (If you need to fix a PKI that you already created, in addition to modifying ca.cnf you will need to make the same change to index.txt.attr.) CC: Pierre Ettori --- diff --git a/utilities/ovs-pki.in b/utilities/ovs-pki.in index ea959fdd..5c8c4bb2 100755 --- a/utilities/ovs-pki.in +++ b/utilities/ovs-pki.in @@ -249,6 +249,7 @@ email_in_dn = no # Don't add the email into cert DN name_opt = ca_default # Subject name display option cert_opt = ca_default # Certificate display option copy_extensions = none # Don't copy extensions from request +unique_subject = no # Allow certs with duplicate subjects # For the CA policy [ policy ]