81264fb9bb
Fixup to make sure that if we have a CN, we have a matching SAN entry. Change-Id: Ic37a053d909f2411e8f08acfa7cf9606a6316e58 Closes-bug: 1401580
612 B
612 B
Fixups
Fixups can be used to modify submitted CSRs before sigining. That means for example adding extra name elements, or extensions. Each fixup is loaded from the "anchor.fixups" namespace using stevedore and gets access to the parsed CSR and the configuration.
Unlike validators, each fixup has to return either a new CSR structure or the modified original.
Included fixups
enforce_alternative_names_present-
No parameters.
If the value from CN does not exist in subject alternative names, it will be copied into either then DNS or IP field, depending on the format.