Merge pull request #610 from fbouliane/add-dns-host-to-instructions

Add DNS SubjectAltName to certificate recipe
This commit is contained in:
Misty Stanley-Jones 2016-11-28 11:59:16 -08:00 committed by GitHub
commit a9e535f3bd
1 changed files with 1 additions and 1 deletions

View File

@ -78,7 +78,7 @@ Since TLS connections can be made via IP address as well as DNS name, they need
to be specified when creating the certificate. For example, to allow connections to be specified when creating the certificate. For example, to allow connections
using `10.10.10.20` and `127.0.0.1`: using `10.10.10.20` and `127.0.0.1`:
$ echo subjectAltName = IP:10.10.10.20,IP:127.0.0.1 > extfile.cnf $ echo subjectAltName = DNS:$HOST,IP:10.10.10.20,IP:127.0.0.1 > extfile.cnf
$ openssl x509 -req -days 365 -sha256 -in server.csr -CA ca.pem -CAkey ca-key.pem \ $ openssl x509 -req -days 365 -sha256 -in server.csr -CA ca.pem -CAkey ca-key.pem \
-CAcreateserial -out server-cert.pem -extfile extfile.cnf -CAcreateserial -out server-cert.pem -extfile extfile.cnf