Skip to content

Commit 116485c

Browse files
Merge pull request #121 from StefanScherer/add-servername-to-subjectAltName
Add servername to subjectAltName for docker-compose
2 parents dfffb6a + a4350e2 commit 116485c

2 files changed

Lines changed: 11 additions & 1 deletion

File tree

dockertls/generate-certs.ps1

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -42,7 +42,7 @@ function createCerts($serverCertsPath, $serverName, $ipAddresses, $clientCertsPa
4242
& openssl req -subj "/CN=$serverName/" -sha256 -new -key server-key.pem -out server.csr
4343

4444
Write-Host "`n=== Signing Server request"
45-
"subjectAltName = " + (($ipAddresses.Split(',') | ForEach-Object { "IP:$_" }) -join ',') | Out-File extfile.cnf -Encoding Ascii
45+
"subjectAltName = " + (($ipAddresses.Split(',') | ForEach-Object { "IP:$_" }) -join ',') + ",DNS.1:$serverName" | Out-File extfile.cnf -Encoding Ascii
4646
cat extfile.cnf
4747
& openssl x509 -req -days 365 -sha256 -in server.csr -CA $Global:caPublicKeyFile -passin $Global:caPrivateKeyPass -CAkey $Global:caPrivateKeyFile `
4848
-CAcreateserial -out server-cert.pem -extfile extfile.cnf

dockertls/run.ps1

Lines changed: 10 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,10 @@
1+
if (!(Test-Path ~\.docker)) {
2+
mkdir ~\.docker
3+
}
4+
$ips = ((Get-NetIPAddress -AddressFamily IPv4).IPAddress) -Join ','
5+
docker container run --rm `
6+
-e SERVER_NAME=$env:FQDN `
7+
-e IP_ADDRESSES=$ips,$env:PUBIP `
8+
-v "C:\ProgramData\docker:C:\ProgramData\docker" `
9+
-v "$env:USERPROFILE\.docker:C:\Users\ContainerAdministrator\.docker" `
10+
stefanscherer/dockertls-windows

0 commit comments

Comments
 (0)