Merge pull request openshift#2269 from yuvalk/ipsec_edn

OCPBUGS-29305: ipsec: fix openssl typo
pperiyasamy · Feb 10, 2024 · 0c1d4ac · 0c1d4ac
2 parents caa06bb + 78b78a0
commit 0c1d4ac
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/bindata/network/ovn-kubernetes/common/ipsec-containerized.yaml b/bindata/network/ovn-kubernetes/common/ipsec-containerized.yaml
@@ -104,7 +104,7 @@ spec:
 
           # If the certificate does not exist or it will expire in the next 6 months
           # (15770000 seconds), we will generate a new one.
-          if ! openssl x509 -noout -dates -checkedn 15770000 -in $cert_pem; then
+          if ! openssl x509 -noout -dates -checkend 15770000 -in $cert_pem; then
             # We use the system-id as the CN for our certificate signing request. This
             # is a requirement by OVN.
             cn=$(ovs-vsctl --retry -t 60 get Open_vSwitch . external-ids:system-id | tr -d "\"")

diff --git a/bindata/network/ovn-kubernetes/common/ipsec-host.yaml b/bindata/network/ovn-kubernetes/common/ipsec-host.yaml
@@ -105,7 +105,7 @@ spec:
 
           # If the certificate does not exist or it will expire in the next 6 months
           # (15770000 seconds), we will generate a new one.
-          if ! openssl x509 -noout -dates -checkedn 15770000 -in $cert_pem; then
+          if ! openssl x509 -noout -dates -checkend 15770000 -in $cert_pem; then
             # We use the system-id as the CN for our certificate signing request. This
             # is a requirement by OVN.
             cn=$(ovs-vsctl --retry -t 60 get Open_vSwitch . external-ids:system-id | tr -d "\"")