[PR #33] Add subjectAltName to cert for modern Go clients #58

Open
opened 2026-02-27 16:47:50 +03:00 by kerem · 0 comments
Owner

📋 Pull Request Information

Original PR: https://github.com/rroemhild/docker-test-openldap/pull/33
Author: @tracemeyers
Created: 8/6/2021
Status: 🔄 Open

Base: masterHead: master


📝 Commits (1)

  • a7474f3 Add subjectAltName to cert for modern Go clients

📊 Changes

2 files changed (+5 additions, -0 deletions)

View changed files

📝 Dockerfile (+2 -0)
📝 bootstrap/slapd-init.sh (+3 -0)

📄 Description

With just the CN set in the snake oil certificate, Go clients refuse to
verify the certificate.

Can be overridden by specifying --build-arg CERT_SAN=DNS:somehost.com
when building the image. For example in test environments, it may be
useful to set it to DNS:localhost to avoid modifying /etc/hosts with
planetexpress.com. Multiple values can be specified, separated with
comma.


🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/rroemhild/docker-test-openldap/pull/33 **Author:** [@tracemeyers](https://github.com/tracemeyers) **Created:** 8/6/2021 **Status:** 🔄 Open **Base:** `master` ← **Head:** `master` --- ### 📝 Commits (1) - [`a7474f3`](https://github.com/rroemhild/docker-test-openldap/commit/a7474f3d93d354847fa5abea74861093458a6bec) Add subjectAltName to cert for modern Go clients ### 📊 Changes **2 files changed** (+5 additions, -0 deletions) <details> <summary>View changed files</summary> 📝 `Dockerfile` (+2 -0) 📝 `bootstrap/slapd-init.sh` (+3 -0) </details> ### 📄 Description With just the CN set in the snake oil certificate, Go clients refuse to verify the certificate. Can be overridden by specifying `--build-arg CERT_SAN=DNS:somehost.com` when building the image. For example in test environments, it may be useful to set it to `DNS:localhost` to avoid modifying `/etc/hosts` with `planetexpress.com`. Multiple values can be specified, separated with comma. --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
Sign in to join this conversation.
No labels
pull-request
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/docker-test-openldap#58
No description provided.