From: Casey Bodley <cbodley@redhat.com>
Date: Mon, 27 Apr 2026 14:53:38 +0000 (-0400)
Subject: qa/openssl-keys: enable wildcard dns with subjectAltName
X-Git-Url: http://git-server-git.apps.pok.os.sepia.ceph.com/?a=commitdiff_plain;h=d524934dd3a7705adaface29fd904a461abd1307;p=ceph.git

qa/openssl-keys: enable wildcard dns with subjectAltName

Signed-off-by: Casey Bodley <cbodley@redhat.com>
---

diff --git a/qa/tasks/openssl_keys.py b/qa/tasks/openssl_keys.py
index 2d26a87290d7..729c35dbfc8c 100644
--- a/qa/tasks/openssl_keys.py
+++ b/qa/tasks/openssl_keys.py
@@ -147,8 +147,8 @@ class OpenSSLKeys(Task):
             if san_ext:
                 remove_files.append(ext)
                 ca_cert.remote.write_file(path=ext,
-                    data='subjectAltName = DNS:{},IP:{}'.format(
-                        cn,
+                        data='subjectAltName = DNS:{},DNS:*.{},IP:{}'.format(
+                        cn, cn,
                         config.get('ip', cert.remote.ip_address)))
 
             # create the signed certificate