flewkey/flewkey.com
1
0
Fork 0
Code Releases Activity

Blog: Explain commonName for nds-constrain't

Browse Source
This commit is contained in:
Ryan Fox 2021-05-07 21:36:12 +00:00
parent 9dbb509170
commit d1eb3155c7
Signed by: flewkey
GPG Key ID: 94F56ADFD848851E
1 changed files with 7 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
posts/2020-07-12-nds-constraint.md
View File

@ -52,6 +52,13 @@ I have copied them for reference.
openssl req -new -key server.key -out server.csr
openssl x509 -req -in server.csr -CA NWC.crt -CAkey NWC.key -CAcreateserial -out server.crt -days 3650 -sha1
**Update (2021-05-07):** The second command will prompt you for values to be
used in your certificate. The Common Name in this certificate should be the
domain name that it will be valid for (e.g. “flipnote.hatena.com”). Most people
will want to set it to “\*.\*.\*” (without the quotes), which will make it valid
for all subdomains. See [this paste](https://pastebin.com/WQNEQwi8) for
reference.
NGINX users need to create a file for the certificate chain as well.
cat server.crt NWC.crt > server-chain.crt