[ovs-git] [openvswitch/ovs] c8efec: ovs-pki: generate x.509 v3 certificate

[GitHub]

  Branch: refs/heads/master
  Home:   https://github.com/openvswitch/ovs
  Commit: c8efec6ef780c51d068fead07098a9ebbda231c2
      https://github.com/openvswitch/ovs/commit/c8efec6ef780c51d068fead07098a9ebbda231c2
  Author: Qiuyu Xiao <qiuyu.xiao.qyx at gmail.com>
  Date:   2018-08-01 (Wed, 01 Aug 2018)

  Changed paths:
    M NEWS
    M utilities/ovs-pki.in

  Log Message:
  -----------
  ovs-pki: generate x.509 v3 certificate

This patch modifies ovs-pki to generate x.509 version 3 certificate.
Compared with the x.509 v1 certificate generated by ovs-pki, version 3
certificate adds subjectAltName field and sets its value the same as
common name (CN). The main reason for this change is to enable
strongSwan IKE daemon to extract certificate identity string from the
subjectAltName field, which makes OVN IPsec implementation easier.

Signed-off-by: Qiuyu Xiao <qiuyu.xiao.qyx at gmail.com>
Signed-off-by: Ben Pfaff <blp at ovn.org>



      **NOTE:** This service has been marked for deprecation: https://developer.github.com/changes/2018-04-25-github-services-deprecation/

      Functionality will be removed from GitHub.com on January 31st, 2019.