HCL-TECH-SOFTWARE / connections-automation

Deployment and upgrade automation scripts for HCL Connections 7.0 based on Ansible
Apache License 2.0
17 stars 32 forks source link

ldap-install ssl without hostname #284

Closed stoeps13 closed 2 weeks ago

stoeps13 commented 1 year ago

The LDAP install role creates an SSL certificate without a hostname. The latest java update for SDI 7.2 (8.0-7.20) forces TLS 1.3 and hostname verification. So, the TDI AL fails.

Hostname should be read from inventory or additional assembly line.

As we already mentioned, SSL, all SSL certs are created with company=HCL etc., this should also be configurable, or an option to add already registered SSL keys should be implemented.