aboutsummaryrefslogtreecommitdiffstats
path: root/painless-le.sh
diff options
context:
space:
mode:
authorThomas Lange <code@nerdmind.de>2016-12-20 18:30:46 +0100
committerThomas Lange <code@nerdmind.de>2016-12-20 18:30:46 +0100
commitea7522622440da7b342a00b1bf65af5c4d1c70f1 (patch)
tree8849164e761198ac1654ac7944079d3c6703842c /painless-le.sh
parent7975aa7fc57c91fcc0bc6e567bd59e7b93e7ee13 (diff)
downloadpainlessle-ea7522622440da7b342a00b1bf65af5c4d1c70f1.tar.gz
painlessle-ea7522622440da7b342a00b1bf65af5c4d1c70f1.tar.xz
painlessle-ea7522622440da7b342a00b1bf65af5c4d1c70f1.zip
ARGUMENT_HOSTNAMES must now contain only a colon separated string with the hostnames.
Diffstat (limited to 'painless-le.sh')
-rwxr-xr-xpainless-le.sh2
1 files changed, 1 insertions, 1 deletions
diff --git a/painless-le.sh b/painless-le.sh
index ad5a376..7ed121f 100755
--- a/painless-le.sh
+++ b/painless-le.sh
@@ -42,7 +42,7 @@ CERTIFICATE_FULL="${ARGUMENT_DIRECTORY%/}/certificate_full.pem"
#===============================================================================
# Generate Certificate-Signing-Request (CSR)
#===============================================================================
-openssl req -config <(cat "${OPENSSLCONF}" <(printf "[SAN]\nsubjectAltName=${ARGUMENT_HOSTNAMES}")) \
+openssl req -config <(cat "${OPENSSLCONF}" <(printf "[SAN]\nsubjectAltName=DNS:`echo ${ARGUMENT_HOSTNAMES} | sed "s/:/,DNS:/"`")) \
-new -sha256 -key "${CONFIDENTIAL}" -out "${REQUESTFILE}" -outform der -reqexts SAN -subj "/"
#===============================================================================