From a0b0b6de279d37641dd1eeb374e52d6fce73ab1d Mon Sep 17 00:00:00 2001
From: Guilhem Moulin <guilhem@fripost.org>
Date: Sat, 28 Jun 2014 19:25:44 +0200
Subject: Add support for CSR and subjectAltName in genkeypair.sh.

---
 roles/common/tasks/ipsec.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'roles/common/tasks')

diff --git a/roles/common/tasks/ipsec.yml b/roles/common/tasks/ipsec.yml
index 6b97ddb..5e0115e 100644
--- a/roles/common/tasks/ipsec.yml
+++ b/roles/common/tasks/ipsec.yml
@@ -4,7 +4,7 @@
 - name: Generate a key pair for IPSec
   command: genkeypair.sh --pubkey=/etc/ipsec.d/certs/{{ inventory_hostname }}.pem
                          --privkey=/etc/ipsec.d/private/{{ inventory_hostname }}.key
-                         -n {{ inventory_hostname }}
+                         --dns {{ inventory_hostname }}
                          -t ecdsa -b secp521r1 -h sha512
   register: r1
   failed_when: r1.rc > 1
-- 
cgit v1.2.3