root 44850efcd2 feat: complete IP address in SAN support ...

Changes:
- generate-csr.sh: Auto-detects target IP via SSH or DNS
- sign-cert.sh: Preserves SAN extensions including IP addresses
- Uses UCS CA password file for automated signing
- Fixes IP Address: -> IP: format conversion for OpenSSL compatibility

Benefits:
✅ Access services via https://10.0.0.50:8006 without warnings
✅ Access via https://hostname:8006 also works
✅ Single certificate for all access methods
✅ Browser shows secure connection for both methods

Technical details:
- Extracts SAN from CSR and applies via -extfile
- Uses 'openssl x509 -req' with -passin file:/etc/univention/ssl/password
- Preserves all DNS names and IP addresses in signed certificate

2025-10-23 09:32:50 +02:00

3.6 KiB

Executable File

Raw Blame History

View Raw