me-box / databox

Databox container manager and dashboard server
MIT License
94 stars 25 forks source link

all databoxes use the same CN for certificates #335

Open cgreenhalgh opened 5 years ago

cgreenhalgh commented 5 years ago

Each databox creates its own self-signed root certificate with CN = Databox, O = University of Nottingham, C = UK. So if you try to install certificates from more than one databox at the same time then they are not unique and the container-manager TLS/HTTPS certificate that is signed by this issuer will show as invalid.

Probably each databox should generate a unique CN for itself. Although unfortunately that's going to be on start-up so won't match any user-assigned name unless the certificates are subsequently regenerated. (oh well)