From 7b9947caeb2b2caff9d645db182ba09b68adc81a Mon Sep 17 00:00:00 2001 From: Yorick Downe Date: Wed, 13 Sep 2023 18:52:14 +0000 Subject: [PATCH] Fixed cert for keymanager on teku-vc-only.yml --- teku/docker-entrypoint-vc.sh | 4 ++-- teku/docker-entrypoint.sh | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/teku/docker-entrypoint-vc.sh b/teku/docker-entrypoint-vc.sh index 3f4f022b..2b732fe5 100755 --- a/teku/docker-entrypoint-vc.sh +++ b/teku/docker-entrypoint-vc.sh @@ -31,7 +31,7 @@ fi if [ -f /var/lib/teku/teku-keyapi.keystore ]; then if [ "$(date +%s -r /var/lib/teku/teku-keyapi.keystore)" -lt "$(date +%s --date="300 days ago")" ]; then rm /var/lib/teku/teku-keyapi.keystore - elif ! openssl x509 -noout -ext subjectAltName -in /var/lib/teku/teku-keyapi.crt | grep -q 'DNS:consensus'; then + elif ! openssl x509 -noout -ext subjectAltName -in /var/lib/teku/teku-keyapi.crt | grep -q 'DNS:vc'; then rm /var/lib/teku/teku-keyapi.keystore fi fi @@ -43,7 +43,7 @@ if [ ! -f /var/lib/teku/teku-keyapi.keystore ]; then echo '[req]'; \ echo 'distinguished_name=req'; \ echo '[san]'; \ - echo 'subjectAltName=DNS:localhost,DNS:consensus,DNS:validator,IP:127.0.0.1') + echo 'subjectAltName=DNS:localhost,DNS:consensus,DNS:validator,DNS:vc,IP:127.0.0.1') openssl pkcs12 -export -in /var/lib/teku/teku-keyapi.crt -inkey /var/lib/teku/teku-keyapi.key -out /var/lib/teku/teku-keyapi.keystore -name teku-keyapi -passout pass:"$__password" fi diff --git a/teku/docker-entrypoint.sh b/teku/docker-entrypoint.sh index 42b9f574..8616f835 100755 --- a/teku/docker-entrypoint.sh +++ b/teku/docker-entrypoint.sh @@ -20,7 +20,7 @@ if [ ! -f /var/lib/teku/teku-keyapi.keystore ]; then echo '[req]'; \ echo 'distinguished_name=req'; \ echo '[san]'; \ - echo 'subjectAltName=DNS:localhost,DNS:consensus,DNS:validator,IP:127.0.0.1') + echo 'subjectAltName=DNS:localhost,DNS:consensus,DNS:validator,DNS:vc,IP:127.0.0.1') openssl pkcs12 -export -in /var/lib/teku/teku-keyapi.crt -inkey /var/lib/teku/teku-keyapi.key -out /var/lib/teku/teku-keyapi.keystore -name teku-keyapi -passout pass:"$__password" fi