mirror of https://github.com/linkerd/linkerd2.git
b389054d53
As discussed in #5228, it is not correct for root and intermediate certs to have SAN. This PR updates the check to not verify the intermediate issuer cert with the identity dns name (which checks with SAN and not CN as the the `verify` func is used to verify leaf certs and not root and intermediate certs). This PR also avoids setting a SAN field when generating certs in the `install` command. Fixes #5228 |
||
|---|---|---|
| .. | ||
| cmd | ||
| flag | ||
| installsp | ||
| table | ||
| Dockerfile-bin | ||
| main.go | ||