starred/dehydrated
1
0
Fork 0
mirror of https://github.com/dehydrated-io/dehydrated.git synced 2026-03-11 21:05:21 +01:00
Code Issues 79 Packages Projects Releases 10 Wiki Activity

support otherName SAN entries for domain verification (fixes #356)

Browse Source
This commit is contained in:
Lukas Schauer
2017-07-11 00:35:51 +02:00
parent ee75c5dca7
commit 4e7fb80bcd
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
dehydrated
View File

@@ -484,11 +484,11 @@ extract_altnames() {
# shellcheck disable=SC1003
altnames="$( <<<"${altnames}" _sed -e 's/^[[:space:]]*//; s/, /\'$'\n''/g' )"
# we can only get DNS: ones signed
if grep -qv '^DNS:' <<<"${altnames}"; then
if grep -qEv '^(DNS|othername):' <<<"${altnames}"; then
_exiterr "Certificate signing request contains non-DNS Subject Alternative Names"
fi
# strip away the DNS: prefix
altnames="$( <<<"${altnames}" _sed -e 's/^DNS://' )"
altnames="$( <<<"${altnames}" _sed -e 's/^(DNS:|othername:<unsupported>)//' )"
echo "${altnames}"
else