From ff93737084fb6178fdab4ca4ec62e7a5a951f640 Mon Sep 17 00:00:00 2001
From: Jeroen Wijenbergh <jeroenwijenbergh@protonmail.com>
Date: Mon, 25 Apr 2022 16:56:45 +0200
Subject: CI: Provide SAN in selfsigned certificate

Otherwise Go fails with `failed obtaining HTTP resource https://eduvpnserver/.well-known/vpn-user-portal with error Get "https://eduvpnserver/.well-known/vpn-user-portal": x509: certificate relies on legacy Common Name field, use SANs instead`
---
 ci/docker/createcert.sh | 1 +
 1 file changed, 1 insertion(+)

(limited to 'ci')

diff --git a/ci/docker/createcert.sh b/ci/docker/createcert.sh
index 15cd8d5..1d55e6f 100755
--- a/ci/docker/createcert.sh
+++ b/ci/docker/createcert.sh
@@ -13,4 +13,5 @@ openssl req \
 	-newkey rsa:2048 \
 	-keyout "${SCRIPT_DIR}/selfsigned/${WEB_FQDN}.key" \
 	-out "${SCRIPT_DIR}/selfsigned/${WEB_FQDN}.crt" \
+	-addext "subjectAltName = DNS:${WEB_FQDN}" \
 	-days 90
-- 
cgit v1.2.3