ipsec: fix openssl tyop

checkedn -> checkend
openshift · Feb 9, 2024 · e90e991 · e90e991
1 parent d415d80
commit e90e991
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/bindata/network/ovn-kubernetes/common/ipsec-containerized.yaml b/bindata/network/ovn-kubernetes/common/ipsec-containerized.yaml
@@ -104,7 +104,7 @@ spec:
 
           # If the certificate does not exist or it will expire in the next 6 months
           # (15770000 seconds), we will generate a new one.
-          if ! openssl x509 -noout -dates -checkedn 15770000 -in $cert_pem; then
+          if ! openssl x509 -noout -dates -checkend 15770000 -in $cert_pem; then
             # We use the system-id as the CN for our certificate signing request. This
             # is a requirement by OVN.
             cn=$(ovs-vsctl --retry -t 60 get Open_vSwitch . external-ids:system-id | tr -d "\"")

diff --git a/bindata/network/ovn-kubernetes/common/ipsec-host.yaml b/bindata/network/ovn-kubernetes/common/ipsec-host.yaml
@@ -105,7 +105,7 @@ spec:
 
           # If the certificate does not exist or it will expire in the next 6 months
           # (15770000 seconds), we will generate a new one.
-          if ! openssl x509 -noout -dates -checkedn 15770000 -in $cert_pem; then
+          if ! openssl x509 -noout -dates -checkend 15770000 -in $cert_pem; then
             # We use the system-id as the CN for our certificate signing request. This
             # is a requirement by OVN.
             cn=$(ovs-vsctl --retry -t 60 get Open_vSwitch . external-ids:system-id | tr -d "\"")