Certificat multi-domaines¶

ref : http://stackoverflow.com/questions/21488845/how-can-i-generate-a-self-signed-certificate-with-subjectaltname-using-openssl

Copier /etc/ssl/openssl.cnf

cp /etc/ssl/openssl.cnf ./

Ajouter à openssl.conf

[ alternate_names ]

DNS.1 = regdrasil.net
DNS.2 = *.regdrasil.net

Ajouter sous la section [ v3_ca ]

subjectAltName = @alternate_names

Decommenter

copy_extensions = copy

Exécuter

 openssl req -new -x509 -days 3650 -nodes -sha256 -out regdrasil.net.pem -keyout regdrasil.net.key -config openssl.cnf