Skip to content

Commit 2c49d71

Browse files
scripts: Excluded fe80 or link local address in keystore setup (apache#6530)
This PR fixes the issue apache#6471 where in keystore setup does not exclude link-local addresses. We have fixed the keystore setup process to exclude the fe80 or link local addresses
1 parent 6ec06ae commit 2c49d71

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

scripts/util/keystore-setup

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -44,7 +44,7 @@ keytool -genkey -storepass "$KS_PASS" -keypass "$KS_PASS" -alias "$ALIAS" -keyal
4444

4545
# Generate CSR
4646
rm -f "$CSR_FILE"
47-
addresses=$(ip address | grep inet | awk '{print $2}' | sed 's/\/.*//g' | grep -v '^169.254.' | grep -v '^127.0.0.1' | grep -v '^::1' | sed 's/^/ip:/g' | tr '\r\n' ',')
47+
addresses=$(ip address | grep inet | awk '{print $2}' | sed 's/\/.*//g' | grep -v '^169.254.' | grep -v '^127.0.0.1' | egrep -v '^::1|^fe80' | grep -v '^::1' | sed 's/^/ip:/g' | tr '\r\n' ',')
4848
keytool -certreq -storepass "$KS_PASS" -alias "$ALIAS" -file $CSR_FILE -keystore "$KS_FILE" -ext san="$addresses" > /dev/null 2>&1
4949
cat "$CSR_FILE"
5050

0 commit comments

Comments
 (0)