Chris Lewis wrote:
I note that plugins/tls_cert clobbers the machine's name on Solaris. It issues `hostname --fqdn` in an attempt to find the machine's full name, and on Solaris, that's treated as setting the hostname to "--fqdn". Ouch.

Sorry, that's my fault (but in my defense, you shouldn't be running that script as root in any case). I'm sure that there is a platform-independent way to get the hostname, but for the moment you can just call the script (not as root) with

        ./plugins/tls_cert --CN your.host.name

and the cert will still be created (or you can pass in all of the other options as well, if you care what your cert looks like). I'll look to protect that `hostname` call...

John

Reply via email to