224daee391
This commit fixes the nats TLS tests by generating new certificates (root CA, server and client) - each valid for 10y. The new certificates don't have a common name (deprecated by X.509) but SANs instead. Since Go 1.15 the Go `crypto/x509` package rejects certificates that only have a common name and no SAN. See: https://golang.org/doc/go1.15#commonname
19 lines
402 B
Plaintext
19 lines
402 B
Plaintext
port: 14226
|
|
net: localhost
|
|
|
|
tls {
|
|
cert_file: "./testdata/certs/nats_server_cert.pem"
|
|
key_file: "./testdata/certs/nats_server_key.pem"
|
|
ca_file: "./testdata/certs/root_ca_cert.pem"
|
|
verify_and_map: true
|
|
}
|
|
authorization {
|
|
ADMIN = {
|
|
publish = ">"
|
|
subscribe = ">"
|
|
}
|
|
users = [
|
|
{user: "CN=localhost,OU=Client,O=MinIO,C=CA", permissions: $ADMIN}
|
|
]
|
|
}
|