Skip to content

Commit

Permalink
HTCONDOR-2637 Request old DN formatting for certificate issuer
Browse files Browse the repository at this point in the history
The openssl formats DNs differently in EL7, EL8, and EL9. Request the old
format explicitly so that we know how to parse it.
  • Loading branch information
JaimeFrey authored and timtheisen committed Nov 22, 2024
1 parent c0e3ddf commit d902e8c
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion src/condor_ce_host_network_check
Original file line number Diff line number Diff line change
Expand Up @@ -401,7 +401,7 @@ def main():
# If the host cert is missing or unreadable, emit a warning but keep going.
hostcert = htcondor.param.get("GSI_DAEMON_CERT", "/etc/grid-security/hostcert.pem")
if os.access(hostcert, os.R_OK):
fd = os.popen("openssl x509 -in %s -noout -subject" % hostcert)
fd = os.popen("openssl x509 -in %s -noout -subject -nameopt compat" % hostcert)
dn = fd.read().strip()
if fd.close() or not dn:
print(f"WARNING: OpenSSL unable to parse host certificate {hostcert}; GSI configuration will likely fail.", file=sys.stderr)
Expand Down

0 comments on commit d902e8c

Please sign in to comment.