Comments (2)
Unless you are using the boulder branch of the LE client... the client
isn't communicating with Boulder.
The master branch is still using v00 of the protocol and working with the
node-acme server that doesn't support multiple hostnames.
I am currently cleaning up the boulder branch, adding account
infrastructure to go with the registration, and writing test cases.
Hopefully I can get a pull-request to master by tomorrow.
I did test the boulder branch with multiple hostnames though and it appears
to work.
Sorry about the confusion.
James
On Wed, Apr 15, 2015 at 7:45 PM, rufoa [email protected] wrote:
When I use the LE client to request a certificate for more than one
hostname, only the first one seems to be included in the certificate. All
additional hostnames seem to be ignored. However, the CSR which is
generated appears to be correct - the problem seems to be occurring at the
boulder end.e.g. I request a cert for "example.org,www.example.org"
The CSR has CN=example.org, SAN={example.org,www.example.org}Expected cert:
CN=example.org, SAN={example.org,www.example.org}Actual issued cert:
CN=example.org, SAN={example.org}I can't see any obvious error in certificate-authority.go - is this a bug
upstream in CFSSL perhaps?—
Reply to this email directly or view it on GitHub
#98.
from boulder.
Ah that explains it! Thanks and sorry for the misunderstanding.
from boulder.
Related Issues (20)
- TestAkamaiPurgerDrainQueueSucceeds data race
- Upgrade to go-jose v4
- Publish website documentation concerning profiles, link in user facing errors
- admin <subcommand> -help should work without -config
- Prototype psql backend
- Include sha256sums of the release artifacts
- ARI stats for draft-03 replacements
- Design and implement a system for automatically rejecting requests from doomed clients
- Design Document
- Remove orderModelv1 from the SA package
- CA: Remove deprecated Issuance.Profiles field
- Add test for CRLs with no entries
- Add CI action to prompt CP/CPS review upon feature flag introduction
- Track chosen certificate profile in RA audit log and metric HOT 1
- PSL update
- Run pkilint in integration tests
- sa: investigate removing requestedNames table HOT 1
- Consider removing Subject Key Identifier from end-entity certificates
- Azure Rate Limit Exclusion question HOT 2
- go1.22: Remove loop variable lexical rebindings after a future gopls update
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from boulder.