What is the purpose of this change? What does it change?
It updates the tutorial for creating self-signed certificates. Without this change restic 0.12.0 compiled with go1.15.8 on windows/amd64 will fail to connect to your restic server, even with --cacert option. Error messages are, depending on what entered at Common name in the openssl dialog:
Entering nothing or *: x509: certificate is not valid for any names, but wanted to match yourdomain.com
Entering yourdomain.com: x509: certificate relies on legacy Common Name field, use SANs or temporarily enable Common Name matching with GODEBUG=x509ignoreCN=0
Was the change discussed in an issue or in the forum before?
No. I've played around until I've figured it out to get it working.
What is the purpose of this change? What does it change?
It updates the tutorial for creating self-signed certificates. Without this change restic 0.12.0 compiled with go1.15.8 on windows/amd64 will fail to connect to your restic server, even with
--cacertoption. Error messages are, depending on what entered atCommon namein the openssl dialog: Entering nothing or*:x509: certificate is not valid for any names, but wanted to match yourdomain.comEnteringyourdomain.com:x509: certificate relies on legacy Common Name field, use SANs or temporarily enable Common Name matching with GODEBUG=x509ignoreCN=0Was the change discussed in an issue or in the forum before?
No. I've played around until I've figured it out to get it working.
Checklist
changelog/unreleased/that describes the changes for our users (template here)gofmton the code in all commitsSince this is only a documentation update no functionality is changed at all.