mirrors/kyverno
mirrors/kyverno
1
0
Fork 0
mirror of https://github.com/kyverno/kyverno.git synced 2025-03-31 03:45:17 +00:00
Code Activity

fix: server name without port to generated certificate (#8053)

Browse source 
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
This commit is contained in:
Charles-Edouard Brétéché 2023-08-17 15:05:00 +02:00 • committed by GitHub
parent 0d9255ed5a
commit 2e842ec6a3
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 9 additions and 11 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

10
pkg/tls/keypair.go
View file

@ -60,15 +60,14 @@ func generateTLS(server string, caCert *x509.Certificate, caKey *rsa.PrivateKey,
}
var ips []net.IP
if server != "" {
serverHost := ""
if strings.Contains(server, ":") {
host, _, err := net.SplitHostPort(server)
serverHost := server
if strings.Contains(serverHost, ":") {
host, _, err := net.SplitHostPort(serverHost)
if err != nil {
logger.Error(err, "failed to split server host/port", "server", server)
logger.Error(err, "failed to split server host/port", "server", serverHost)
}
serverHost = host
}
if serverHost != "" {
ip := net.ParseIP(serverHost)
if ip == nil || ip.IsUnspecified() {
dnsNames = append(dnsNames, serverHost)
@ -76,7 +75,6 @@ func generateTLS(server string, caCert *x509.Certificate, caKey *rsa.PrivateKey,
ips = append(ips, ip)
}
}
}
templ := &x509.Certificate{
SerialNumber: big.NewInt(1),
Subject: pkix.Name{