Alex-Devera/tpotce
1
0
Fork 0
mirror of https://github.com/telekom-security/tpotce.git synced 2025-05-03 13:48:54 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

add sAN to selfsigned cert

Browse source 
fixes #478
This commit is contained in:
t3chn0m4g3 2019-12-27 14:53:07 +00:00
parent 659831cf99
commit 756215519c
1 changed files with 2 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
iso/installer/install.sh
View file

@ -643,6 +643,7 @@ fi
if ! [ "$myCONF_TPOT_FLAVOR" == "SENSOR" ]; if ! [ "$myCONF_TPOT_FLAVOR" == "SENSOR" ];
then then
fuBANNER "NGINX Certificate" fuBANNER "NGINX Certificate"
myINTIP=$(hostname -I | awk '{ print $1 }')
mkdir -p /data/nginx/cert mkdir -p /data/nginx/cert
openssl req \ openssl req \
-nodes \ -nodes \
@ -653,6 +654,7 @@ then
-out "/data/nginx/cert/nginx.crt" \ -out "/data/nginx/cert/nginx.crt" \
-days 3650 \ -days 3650 \
-subj '/C=AU/ST=Some-State/O=Internet Widgits Pty Ltd' -subj '/C=AU/ST=Some-State/O=Internet Widgits Pty Ltd'
-addext "subjectAltName = IP:$myINTIP"
fi fi
# Let's setup the ntp server # Let's setup the ntp server