telekom-security/tpotce
1
0
Fork 0
mirror of https://github.com/telekom-security/tpotce.git synced 2025-07-02 01:27:27 -04:00
Code Issues Packages Projects Releases Wiki Activity

add sAN to selfsigned cert

Browse Source 
fixes #478
This commit is contained in:
t3chn0m4g3
2019-12-27 14:53:07 +00:00
parent 659831cf99
commit 756215519c
1 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
iso/installer/install.sh
View File

@ -643,6 +643,7 @@ fi
if ! [ "$myCONF_TPOT_FLAVOR" == "SENSOR" ]; if ! [ "$myCONF_TPOT_FLAVOR" == "SENSOR" ];
then then
fuBANNER "NGINX Certificate" fuBANNER "NGINX Certificate"
myINTIP=$(hostname -I | awk '{ print $1 }')
mkdir -p /data/nginx/cert mkdir -p /data/nginx/cert
openssl req \ openssl req \
-nodes \ -nodes \
@ -653,6 +654,7 @@ then
-out "/data/nginx/cert/nginx.crt" \ -out "/data/nginx/cert/nginx.crt" \
-days 3650 \ -days 3650 \
-subj '/C=AU/ST=Some-State/O=Internet Widgits Pty Ltd' -subj '/C=AU/ST=Some-State/O=Internet Widgits Pty Ltd'
-addext "subjectAltName = IP:$myINTIP"
fi fi
# Let's setup the ntp server # Let's setup the ntp server