remove disallowed characters from hostname before cert generation (#2800)

Signed-off-by: Alex Goodman <[email protected]>

Author: wagoodman

grype/db/v5/distribution/test-fixtures/tls/generate-x509-cert-pair.sh

@@ -1,6 +1,9 @@
 #!/usr/bin/env bash
 set -eux
 
+# we want to still use this on systems where there could be invalid characters in the hostname (e.g. ' or " characters)
+HOSTNAME=$(hostname | sed "s/['']/'/g" | sed 's/[^a-zA-Z0-9.-]/-/g')
+
 # create private key
 openssl genrsa -out server.key 2048
 
@@ -11,6 +14,5 @@ openssl req -new -x509 -sha256 \
     -days 3650 \
     -reqexts SAN \
     -extensions SAN \
-    -config <(cat /etc/ssl/openssl.cnf <(printf "[SAN]\nsubjectAltName=DNS:$(hostname).local")) \
-    -subj "/C=US/ST=Test/L=Test/O=Test/CN=$(hostname).local"
-
+    -config <(cat /etc/ssl/openssl.cnf <(printf "[SAN]\nsubjectAltName=DNS:$HOSTNAME.local")) \
+    -subj "/C=US/ST=Test/L=Test/O=Test/CN=$HOSTNAME.local"