Allow server to override CN to add DNS suffix and to normalize to lowercase

This commit is contained in:
Lauri Võsandi 2021-05-08 11:40:36 +00:00
parent 657ee3a38e
commit 1a5836c2ce

View File

@ -352,10 +352,6 @@ def certidude_enroll(fork, no_wait, kerberos):
except: # TODO: catch correct exceptions
raise ValueError("Failed to parse PEM: %s" % submission.text)
assert cert.subject.native["common_name"] == common_name, \
"Expected certificate with common name %s, but got %s instead" % \
(common_name, cert.subject.native["common_name"])
os.umask(0o022)
certificate_partial = certificate_path + ".part"
with open(certificate_partial, "w") as fh: