Merge pull request #610 from fbouliane/add-dns-host-to-instructions

Add DNS SubjectAltName to certificate recipe
This commit is contained in:
Misty Stanley-Jones 2016-11-28 11:59:16 -08:00 committed by GitHub
commit a9e535f3bd
1 changed files with 1 additions and 1 deletions

View File

@ -78,7 +78,7 @@ Since TLS connections can be made via IP address as well as DNS name, they need
to be specified when creating the certificate. For example, to allow connections
using `10.10.10.20` and `127.0.0.1`:
$ echo subjectAltName = IP:10.10.10.20,IP:127.0.0.1 > extfile.cnf
$ echo subjectAltName = DNS:$HOST,IP:10.10.10.20,IP:127.0.0.1 > extfile.cnf
$ openssl x509 -req -days 365 -sha256 -in server.csr -CA ca.pem -CAkey ca-key.pem \
-CAcreateserial -out server-cert.pem -extfile extfile.cnf