Commit 53ae3723 authored by Leigh Stoller's avatar Leigh Stoller

Add altnames (CNAMES) for ops and wiki to avoid silly browser

warning.
parent 5e4986a5
......@@ -3,8 +3,8 @@ prompt = no
default_bits = 1024
default_keyfile = privkey.pem
distinguished_name = req_distinguished_name
attributes = req_attributes
x509_extensions = v3_ca # The extentions to add to the self signed cert
req_extensions = v3_ca # The extentions to add to the self signed cert
encrypt_key = no
string_mask = nombstr
......@@ -19,9 +19,11 @@ OU = WebServer
CN = @USERNODE@
emailAddress = @TBOPSEMAIL@
[ req_attributes ]
[ v3_ca ]
subjectKeyIdentifier=hash
authorityKeyIdentifier=keyid:always,issuer:always
basicConstraints = CA:true
subjectAltName=@req_altname
basicConstraints = CA:false
[ req_altname ]
DNS.1 = ops.@OURDOMAIN@
DNS.2 = wiki.@OURDOMAIN@
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment