Closed slowscript closed 3 years ago
IP should be put into "IPAddress" subject alternative name, not "DNSName". Some implementations of TLS (like Conscrypt) reject the certificate otherwise. I have tested this with older versions and it didn't break compatibility.
Weird I'm not sure why I didn't see this when I was working out how to avoid needing a dns name.
Thanks
IP should be put into "IPAddress" subject alternative name, not "DNSName". Some implementations of TLS (like Conscrypt) reject the certificate otherwise. I have tested this with older versions and it didn't break compatibility.