search

centerclick / feedback

Issues, Bug Reports, and Feature Requests
7 stars 0 forks source link

Let's Encrypt https should support secondary Subject Alternative Names #94

Closed tlhackque closed 1 year ago

tlhackque commented 1 year ago

Currently, only one hostname can be specified for a https certificate.

It is useful to be able to specify more than one. E.g. when a server's external name differs from the internal name.

The primary host name goes in the certificate's (and CSR's) Subject: CommonName attribute. It, and the secondary names go in the SubjectAlternative name attribute.

ACME and Let's Encrypt both support this. Allowing a a comma-separated list of hostnames would be an easy way to extend the UI without complicating it for simple use cases.

dave4445 commented 1 year ago

note this is supported for HTTP-01, just not DNS-01

dave4445 commented 1 year ago

2.7.0