Commit 53ae3723 authored by Leigh Stoller's avatar Leigh Stoller

Add altnames (CNAMES) for ops and wiki to avoid silly browser

warning.
parent 5e4986a5
...@@ -3,8 +3,8 @@ prompt = no ...@@ -3,8 +3,8 @@ prompt = no
default_bits = 1024 default_bits = 1024
default_keyfile = privkey.pem default_keyfile = privkey.pem
distinguished_name = req_distinguished_name distinguished_name = req_distinguished_name
attributes = req_attributes
x509_extensions = v3_ca # The extentions to add to the self signed cert x509_extensions = v3_ca # The extentions to add to the self signed cert
req_extensions = v3_ca # The extentions to add to the self signed cert
encrypt_key = no encrypt_key = no
string_mask = nombstr string_mask = nombstr
...@@ -19,9 +19,11 @@ OU = WebServer ...@@ -19,9 +19,11 @@ OU = WebServer
CN = @USERNODE@ CN = @USERNODE@
emailAddress = @TBOPSEMAIL@ emailAddress = @TBOPSEMAIL@
[ req_attributes ]
[ v3_ca ] [ v3_ca ]
subjectKeyIdentifier=hash subjectKeyIdentifier=hash
authorityKeyIdentifier=keyid:always,issuer:always subjectAltName=@req_altname
basicConstraints = CA:true basicConstraints = CA:false
[ req_altname ]
DNS.1 = ops.@OURDOMAIN@
DNS.2 = wiki.@OURDOMAIN@
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment