Add SAN as example for reuse of certificates with different hosts

DOMjudge · Oct 29, 2023 · 076730b · 076730b
1 parent 524d16a
commit 076730b
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/provision-contest/ansible/Makefile b/provision-contest/ansible/Makefile
@@ -66,6 +66,7 @@ $(SSHKEY) $(SSHKEY).pub:
 
 $(SSL_DOMSERVER_FILES):
 	openssl req -x509 -nodes -newkey rsa:4096 -subj "/O=DOMjudge/CN=domjudge" \
+        -addext "subjectAltName = DNS:wf46-domjudge,DNS:wf47-domjudge,DNS:analyst" \
 		-sha256 -days 365 -keyout $(SSL_DOMSERVER).key -out $(SSL_DOMSERVER).crt
 $(SSL_LOCALHOST_FILES):
 	openssl req -x509 -nodes -newkey rsa:4096 -subj "/O=DOMjudge/CN=localhost" \