Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix SANs in CSR #60

Merged

Conversation

k0nserv
Copy link
Collaborator

@k0nserv k0nserv commented May 12, 2023

Release 0.10.48 broke our SAN generation such that calling

an.dns("*.example.com,DNS:example.com")

Did not result in a SAN extension that Golang's
ParseCertificateRequest would parse into two distinct SANs, instead it
would consider it to be a single SAN.

Calling an.dns for each domain resolves this.

Release 0.10.48 broke our SAN generation such that calling

```rust
an.dns("*.example.com,DNS:example.com")
```

Did not result in a SAN extension that Golang's
`ParseCertificateRequest` would parse into two distinct SANs, instead it
would consider it to be a single SAN.

Calling `an.dns` for each domain resolves this.
@k0nserv k0nserv mentioned this pull request May 12, 2023
@k0nserv
Copy link
Collaborator Author

k0nserv commented May 12, 2023

This applies the workaround from sfackler/rust-openssl#1923

Copy link
Owner

@algesten algesten left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM!

@algesten algesten merged commit f91379d into algesten:master May 15, 2023
@k0nserv k0nserv deleted the fix/fix-lets-encrypt-2-electric-boogalo branch May 15, 2023 09:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants