Skip to content

extenginx: update self-signed key to use subjectAltName#253

Merged
charliemirabile merged 2 commits into
masterfrom
subjectAltName
May 22, 2025
Merged

extenginx: update self-signed key to use subjectAltName#253
charliemirabile merged 2 commits into
masterfrom
subjectAltName

Conversation

@theyoyojo

Copy link
Copy Markdown
Contributor

Fixes: #242

Signed-off-by: Joel Savitz joel@underground.software

@charliemirabile

Copy link
Copy Markdown
Contributor

I knew that there was a better way to do this and that I had shared it with you, but I could not for the life of me figure out where. Turns out I texted you a screenshot of my editor 🤦. Anyways, this can be done by just adding a single argument -addtext "subjectAltName = DNS:${NGINX_HOSTNAME}" to the command that actually generates the cert instead of all this crap with the config.

@theyoyojo

Copy link
Copy Markdown
Contributor Author

Using -addtext gives me this error:

req: Multiple digest or unknown options: -sha256 and -addtext
req: Use -help for summary.

@charliemirabile

Copy link
Copy Markdown
Contributor

Using -addtext gives me this error:

req: Multiple digest or unknown options: -sha256 and -addtext

oops, that was just a typo in transcribing the option from the screenshot. The actual option is -addext

req: Use -help for summary.

theyoyojo added 2 commits May 22, 2025 14:28
Fixes: #242

Signed-off-by: Joel Savitz <joel@underground.software>
This is in line with other containers like smtp and submatrix

Signed-off-by: Joel Savitz <joel@underground.software>

@charliemirabile charliemirabile left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lgtm

@charliemirabile charliemirabile merged commit 4e0e5a8 into master May 22, 2025
1 check passed
@charliemirabile charliemirabile deleted the subjectAltName branch May 22, 2025 19:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

use newer subjectAltName in certificates instead of commonName

2 participants