Skip to content

Conversation

@NickBorgersOnLowSecurityNode

I ran into issues with Santa not accepting the cert based on CN alone, and instead needing DN.

I also feel like the FQDN should reflect that the entity being contacted is moroz and not santa.

This required a change to the OpenSSL script to rely on a somewhat new feature for including extensions such as SANs. There is a negative here that the script now won't work with old OpenSSL versions.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant