add subject alt names to the CA root certificate

Varying-Vagrant-Vagrants · Mar 14, 2020 · 9c1fb60 · 9c1fb60
1 parent 9454144
commit 9c1fb60
Showing 1 changed file with 6 additions and 2 deletions.
diff --git a/tls-ca/openssl-ca.conf b/tls-ca/openssl-ca.conf
@@ -5,16 +5,20 @@ x509_extensions        = v3_ca
 
 [v3_ca]
 subjectKeyIdentifier   = hash
+subjectAltName         = @alt_names
 extendedKeyUsage       = serverAuth
-authorityKeyIdentifier = keyid:always,issuer
+authorityKeyIdentifier = keyid:always, issuer
 basicConstraints       = critical, CA:true
 keyUsage               = critical, digitalSignature, cRLSign, keyCertSign
 
 [req_distinguished_name]
 C                      = GB
 ST                     = Test State or Province
 L                      = Test Locality
-O                      = VVV
+O                      = VVV INTERNAL CA
 OU                     = VVV Maintainers
 CN                     = vvv.test
 emailAddress           = [email protected]
+
+[alt_names]
+DNS.1 = vvv.test