Files
vault/command
Alexander Scheel 7267d6ee56 Clean up dev cert construction (#17657)
Vault's new TLS devvault mode has two nits with certificate
construction:

 1. The CA doesn't need to include any SANs, as these aren't checked.
    Technically this means the CA could be reused as a leaf certificate
    for the one specified IP SAN, which is less desirable.
 2. Add hostname to SANs in addition to CNs. This is a best practice, as
    (when the CN is a hostname), it is preferable to have everything in
    SANs as well.

Neither of these are major changes.

Signed-off-by: Alexander Scheel <alex.scheel@hashicorp.com>

Signed-off-by: Alexander Scheel <alex.scheel@hashicorp.com>
2022-10-26 15:29:37 -04:00
..
2019-03-25 10:56:04 -07:00
2017-10-24 09:28:06 -04:00
2022-02-18 08:50:05 -08:00
2019-02-14 11:54:47 -08:00
2022-04-19 14:28:08 -04:00
2022-09-06 14:11:04 -04:00
2022-02-15 10:43:49 -08:00
2017-10-24 09:30:47 -04:00
2020-03-17 09:46:44 -04:00
2017-10-24 09:30:48 -04:00
2017-10-24 09:39:34 -04:00
2022-09-22 09:12:41 -04:00
2018-11-06 17:21:24 -08:00
2017-10-24 09:30:48 -04:00
2022-02-18 08:50:05 -08:00
2017-10-24 09:39:34 -04:00
2018-02-12 18:12:16 -05:00
2017-10-24 09:30:47 -04:00
2022-04-19 14:28:08 -04:00