mkcert icon indicating copy to clipboard operation
mkcert copied to clipboard

Doesn't work with Synology nginx as it doesn't have a name

Open rightsaidfred99 opened this issue 2 years ago • 5 comments

Environment

  • Operating system (including version): macOS
  • mkcert version (from mkcert -version): 1.4.4
  • Server (where the certificate is loaded): Synology
  • Client (e.g. browser, CLI tool, or script): Synology

What you did

I can import the certificates into Synology's nginx UI. It loads okay

What went wrong

The problem occurs as the certificate generated doesn't have a name. so you can add domains and subdomains with Synology's UI. I propose that it just ads a title/name to the certificate.

rightsaidfred99 avatar Sep 22 '22 03:09 rightsaidfred99

Sorry, by title - I mean "Issued To" field which Synology requires.

rightsaidfred99 avatar Sep 22 '22 03:09 rightsaidfred99

@rightsaidfred99 I'm interested in this one. Where can you see Synology requirements? Maybe with that in mind we can contribute with a PR here.

android10 avatar Oct 07 '22 17:10 android10

I was not able to find any official certificate requirements by Synology, but I noticed the subject CommonName was not set by mkcert. After setting a CN, Synology accepts the generated certificates. I just pushed an PR to add this.

elexx avatar Jan 16 '23 15:01 elexx

This problem seems btw very similar to https://github.com/FiloSottile/mkcert/issues/47 where iOS would not accept the rootCA if CN was not set.

elexx avatar Jan 16 '23 15:01 elexx