Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Make Subject Alternative Names in the self-signed certificate Configurable. #7333

Open
AnsonHwang86 opened this issue May 10, 2024 · 0 comments

Comments

@AnsonHwang86
Copy link
Contributor

AnsonHwang86 commented May 10, 2024

Here is decoder of default Edgedb self-signed Certificate.

image

Subject Alternative Names: 127.0.0.1

After I added this cert to system store on Mac, there is a ERR_CERT_COMMON_NAME_INVALID ERROR show in Chrome browser, Because I don't use IP 127.0.0.1
image

image

I have to run following command to regenerate the Cert and prevail key and overwrite the default one, and the Error will disappear.
image

C:/"Program Files"/git/usr/bin/openssl req -x509 -newkey rsa:4096 -sha256 -days 3650 -nodes -keyout edbprivkey.pem -out edbtlscert.pem -subj "/C=US/ST=NY/L=NewYorks/O=COMA/OU=Section/CN=Edgedb Server" -addext "subjectAltName=IP:192.168.192.72"

In many case we don't use 127.0.0.1, my advice is to make this IP configurable in docker Environment Variable, it will save our time.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant