puppetserver-ca 2.0.1 → 2.0.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 33d0c2bbf4e4efae9ed5ee88619f47bfbd850b24b0e7fff02bf7e6a106d40d18
-  data.tar.gz: 70542df4956703b70b73ab3aa8e5cb4ef8c007925fb47dc1e2197d762e1a3269
+  metadata.gz: dd192c17f1178829548e7c39aff278a87fcc6bc699d7a1a357fcf84a53af7190
+  data.tar.gz: a05ef2372661026a0bb3c539d8584e25ec6b4b0b9e0d61752de4335e23a95804
 SHA512:
-  metadata.gz: 399ef8c2fecd89f42db48d848685f61ac9efaffa1039a8e726b4c1b60dda3d82c996c4fff2cec8d315a35bcf5643a46233ae0647a5f79e2f730055e41b404e6f
-  data.tar.gz: 342d56b051591b0fbf2211e3f75dd7249ff934f087f1ad2b0005cbdc4dbb0d5d6228e22b248ab22d9a4bb90dd21026daa0ac7fc363937652b5887fe971b29079
+  metadata.gz: d1c0059436ac51099bf0f73f6ad72a0989ccbf59e3e934b8f213ffd05c0c89ed4c5a84ce9b32b0a0e76977ab46b9e17f0474e890bc9b7136cfde5f8224f2b83c
+  data.tar.gz: 6fe6cd33aa3712d26444d0288184273c8184e5172bdbcb894516f450a316a0b41981428a6f07b1135f984a915fb09b9d5eb7656982d742afaf34fec5ad86c650

data/lib/puppetserver/ca/action/generate.rb

@@ -296,7 +296,9 @@ BANNER
         end
 
         def process_alt_names(alt_names, certname)
-          return '' if alt_names.empty?
+          # It is recommended (and sometimes enforced) to always include
+          # the certname as a SAN, see RFC 2818 https://tools.ietf.org/html/rfc2818#section-3.1.
+          return "DNS:#{certname}" if alt_names.empty?
 
           current_alt_names = alt_names.dup
           # When validating the cert, OpenSSL will ignore the CN field if

data/lib/puppetserver/ca/config/puppet.rb

@@ -74,15 +74,14 @@ module Puppetserver
         end
 
         def default_certname
-          @certname ||=
-            hostname = Facter.value(:hostname)
-            domain = Facter.value(:domain)
-            if domain and domain != ''
-              fqdn = [hostname, domain].join('.')
-            else
-              fqdn = hostname
-            end
-            fqdn.chomp('.')
+          hostname = Facter.value(:hostname)
+          domain = Facter.value(:domain)
+          if domain and domain != ''
+            fqdn = [hostname, domain].join('.')
+          else
+            fqdn = hostname
+          end
+          fqdn.chomp('.')
         end
 
         # Resolve settings from default values, with any overrides for the

data/lib/puppetserver/ca/version.rb

@@ -1,5 +1,5 @@
 module Puppetserver
   module Ca
-    VERSION = "2.0.1"
+    VERSION = "2.0.2"
   end
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: puppetserver-ca
 version: !ruby/object:Gem::Version
-  version: 2.0.1
+  version: 2.0.2
 platform: ruby
 authors:
 - Puppet, Inc.
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2020-12-09 00:00:00.000000000 Z
+date: 2021-03-25 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: facter