GreenLock asking for a wildcard cert #16

Новая задача

Ghost · 2020-03-02T20:09:17Z

Ghost прокомментировал(а)

2020-03-02 20:09:17 +00:00

A user reported the MeshCentral could not get a Let's Encrypt certificate and sent over the logs here: https://github.com/Ylianst/MeshCentral/issues/986.

Something of note is that he is requesting a single "remote.xxxxxxxxxxxxxxx.pl" name, but the request fails with:

{"context":"cert_issue","subject":"remote.xxxxxxxxxxxxxxx.pl","altnames":["*.xxxxxxxxxxxxxxx.pl","remote.xxxxxxxxxxxxxxx.pl"]}

Notice the wildcard name was added and I don't want it added. Looking at "GreenLock.js" the "_single" method figures out the wildcard name for any name with 2 dots of more. The manager.js then seems to add it as an altname.

Looking for guidance on how to not have the wildcard name be added to the altnames. Thanks.

A user reported the MeshCentral could not get a Let's Encrypt certificate and sent over the logs here: https://github.com/Ylianst/MeshCentral/issues/986. Something of note is that he is requesting a single "remote.xxxxxxxxxxxxxxx.pl" name, but the request fails with: {"context":"cert_issue","subject":"remote.xxxxxxxxxxxxxxx.pl","altnames":["*.xxxxxxxxxxxxxxx.pl","remote.xxxxxxxxxxxxxxx.pl"]} Notice the wildcard name was added and I don't want it added. Looking at "GreenLock.js" the "_single" method figures out the wildcard name for any name with 2 dots of more. The manager.js then seems to add it as an altname. Looking for guidance on how to not have the wildcard name be added to the altnames. Thanks.

coolaj86 прокомментировал(а)

2020-03-05 05:52:54 +00:00

Владелец

My guess is that you have something misconfigured. The default behavior is NOT to use wildcards.

Try the example in the Greenlock Express README.md and make a few small changes until you get to where you'd like to be.

My guess is that you have something misconfigured. The default behavior is NOT to use wildcards. Try the example in the Greenlock Express README.md and make a few small changes until you get to where you'd like to be.

Войдите, чтобы присоединиться к обсуждению.

2 участников

Уведомления

Срок выполнения

Срок выполнения не установлен.

Зависимости

Зависимостей нет.

Ссылка: root/greenlock.js#16