docker-test-openldap icon indicating copy to clipboard operation
docker-test-openldap copied to clipboard

Published 20 hours ago • verified publisher icon rroemhild

Add subjectAltName to cert for modern Go clients

Open tracemeyers opened this issue 2 years ago • 0 comments

With just the CN set in the snake oil certificate, Go clients refuse to verify the certificate.

Can be overridden by specifying --build-arg CERT_SAN=DNS:somehost.com when building the image. For example in test environments, it may be useful to set it to DNS:localhost to avoid modifying /etc/hosts with planetexpress.com. Multiple values can be specified, separated with comma.

tracemeyers avatar Aug 06 '21 13:08 tracemeyers