Fixed cert for keymanager on teku-vc-only.yml (#1520)

eth-educators · Sep 13, 2023 · 1d20d0e · 1d20d0e
1 parent 459764e
commit 1d20d0e
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 3 deletions.
diff --git a/teku/docker-entrypoint-vc.sh b/teku/docker-entrypoint-vc.sh
@@ -31,7 +31,7 @@ fi
 if [ -f /var/lib/teku/teku-keyapi.keystore ]; then
     if [ "$(date +%s -r /var/lib/teku/teku-keyapi.keystore)" -lt "$(date +%s --date="300 days ago")" ]; then
        rm /var/lib/teku/teku-keyapi.keystore
-    elif ! openssl x509 -noout -ext subjectAltName -in /var/lib/teku/teku-keyapi.crt | grep -q 'DNS:consensus'; then
+    elif ! openssl x509 -noout -ext subjectAltName -in /var/lib/teku/teku-keyapi.crt | grep -q 'DNS:vc'; then
        rm /var/lib/teku/teku-keyapi.keystore
     fi
 fi
@@ -43,7 +43,7 @@ if [ ! -f /var/lib/teku/teku-keyapi.keystore ]; then
       echo '[req]'; \
       echo 'distinguished_name=req'; \
       echo '[san]'; \
-      echo 'subjectAltName=DNS:localhost,DNS:consensus,DNS:validator,IP:127.0.0.1')
+      echo 'subjectAltName=DNS:localhost,DNS:consensus,DNS:validator,DNS:vc,IP:127.0.0.1')
     openssl pkcs12 -export -in /var/lib/teku/teku-keyapi.crt -inkey /var/lib/teku/teku-keyapi.key -out /var/lib/teku/teku-keyapi.keystore -name teku-keyapi -passout pass:"$__password"
 fi
 

diff --git a/teku/docker-entrypoint.sh b/teku/docker-entrypoint.sh
@@ -20,7 +20,7 @@ if [ ! -f /var/lib/teku/teku-keyapi.keystore ]; then
       echo '[req]'; \
       echo 'distinguished_name=req'; \
       echo '[san]'; \
-      echo 'subjectAltName=DNS:localhost,DNS:consensus,DNS:validator,IP:127.0.0.1')
+      echo 'subjectAltName=DNS:localhost,DNS:consensus,DNS:validator,DNS:vc,IP:127.0.0.1')
     openssl pkcs12 -export -in /var/lib/teku/teku-keyapi.crt -inkey /var/lib/teku/teku-keyapi.key -out /var/lib/teku/teku-keyapi.keystore -name teku-keyapi -passout pass:"$__password"
 fi