commit 4d34b5545478ae541ee6b9ca350fc8ebc8de4884
author Vasyl Saienko <vsaienko@mirantis.com> Mon Apr 01 15:38:12 2019 +0300
committer Vasyl Saienko <vsaienko@mirantis.com> Tue Apr 02 14:20:02 2019 +0000
tree 2077ec71d42a1b27c1690488cf5f7a2e899aed98
parent 606a4d433124793c72cd9afa340b0ee692c17e9d

Don't use FQDN in CN for libvirt certs

According to RFC CN is limited to 63 characters, this patch
updates common_name for libvirt certs to use hostname only.
FQDN is added to alvernative names.

Change-Id: Ib509d73faeb17bcc423a2590de730baddd209d81
Related-Prod: PROD-28275
(cherry picked from commit c464b3b13162adab0512df7c366c0d3643d451ac)

nova/compute/libvirt/ssl/init.yml

diff --git a/nova/compute/libvirt/ssl/init.yml b/nova/compute/libvirt/ssl/init.yml
index d9be1a5..4523183 100644
--- a/nova/compute/libvirt/ssl/init.yml
+++ b/nova/compute/libvirt/ssl/init.yml
@@ -5,7 +5,7 @@
     nova_compute_libvirt_allowed_dn_list:
       all:
         enabled: true
-        value: '*CN=cmp*.${_param:cluster_domain}*'
+        value: '*CN=cmp*'
   nova:
     compute:
       libvirt: