Ensure certificate serial number is short enough for firefox

[edlerd]

Done

• Make generated certificates compatible to firefox, too long serial numbers cause problems in it. See this bug.
• Add hostname to the downloaded pfx and crt files
• Add hostname to certificate name

QA

1. Run the LXD-UI:
   • On the demo server via the link posted by @webteam-app below. This is only available for PRs created by collaborators of the repo. Ask @lorumic or @edlerd for access.
   • With a local copy of this branch, run as described here.
2. Perform the following QA steps:
   • create new certificates
   • import to firefox and test usage -- using the cert against the dev server with dotrun will not work, because the cert is in the proxy and not coming from the browser. Test it against LXD directly under https://localhost:8443 with a locally UI enabled LXD
   • ensure name contains hostname

[webteam-app]

Demo starting at https://lxd-ui-480.demos.haus

[lorumic]

Some QA notes:

1. "Scroll all the way down" it says in the tutorial for Firefox, but it's not at the very bottom. Maybe we could change this line to "Scroll down to the Certificates section, and then click the View Certificates button"?

2. For some reason, the spinner is not visible on Firefox while generating:

This works as expected on Chrome.

I cannot seem to be able to complete the process. When I restart the browser, I don't get asked to select the certificate by the browser. Neither on Firefox, nor on Chrome. Any idea why? Do I need to configure some auth setting in LXD?

[edlerd]

I cannot seem to be able to complete the process. When I restart the browser, I don't get asked to select the certificate by the browser. Neither on Firefox, nor on Chrome. Any idea why? Do I need to configure some auth setting in LXD?

Added the qa steps above. This only works when talking to LXD directly, the dev environment does not use the browsers client certificates.

[edlerd]

Some QA notes:

Addressed those just now.

[lorumic]

Test it against LXD directly under https://localhost:8443 with a locally UI enabled LXD

Can you elaborate on this a bit more? It seems to me that this tiny addition to the QA steps is still implying a lot of prior knowledge.

[edlerd]

Test it against LXD directly under https://localhost:8443 with a locally UI enabled LXD

Can you elaborate on this a bit more? It seems to me that this tiny addition to the QA steps is still implying a lot of prior knowledge.

Follow the steps from the readme to install LXD normally. Then use the new certificate that you generated from this branches dev environment.