GreenLock asking for a wildcard cert #16

New Issue

Ghost · 2020-03-02T20:09:17Z

Ghost commented

2020-03-02 20:09:17 +00:00

A user reported the MeshCentral could not get a Let's Encrypt certificate and sent over the logs here: https://github.com/Ylianst/MeshCentral/issues/986.

Something of note is that he is requesting a single "remote.xxxxxxxxxxxxxxx.pl" name, but the request fails with:

{"context":"cert_issue","subject":"remote.xxxxxxxxxxxxxxx.pl","altnames":["*.xxxxxxxxxxxxxxx.pl","remote.xxxxxxxxxxxxxxx.pl"]}

Notice the wildcard name was added and I don't want it added. Looking at "GreenLock.js" the "_single" method figures out the wildcard name for any name with 2 dots of more. The manager.js then seems to add it as an altname.

Looking for guidance on how to not have the wildcard name be added to the altnames. Thanks.

A user reported the MeshCentral could not get a Let's Encrypt certificate and sent over the logs here: https://github.com/Ylianst/MeshCentral/issues/986. Something of note is that he is requesting a single "remote.xxxxxxxxxxxxxxx.pl" name, but the request fails with: {"context":"cert_issue","subject":"remote.xxxxxxxxxxxxxxx.pl","altnames":["*.xxxxxxxxxxxxxxx.pl","remote.xxxxxxxxxxxxxxx.pl"]} Notice the wildcard name was added and I don't want it added. Looking at "GreenLock.js" the "_single" method figures out the wildcard name for any name with 2 dots of more. The manager.js then seems to add it as an altname. Looking for guidance on how to not have the wildcard name be added to the altnames. Thanks.

coolaj86 commented

2020-03-05 05:52:54 +00:00

My guess is that you have something misconfigured. The default behavior is NOT to use wildcards.

Try the example in the Greenlock Express README.md and make a few small changes until you get to where you'd like to be.

My guess is that you have something misconfigured. The default behavior is NOT to use wildcards. Try the example in the Greenlock Express README.md and make a few small changes until you get to where you'd like to be.

Sign in to join this conversation.

No Label

No Milestone

No Assignees

2 Participants

Notifications

Due Date

The due date is invalid or out of range. Please use the format 'yyyy-mm-dd'.

No due date set.

Dependencies

No dependencies set.

Reference: root/greenlock.js#16