From bd5739b3db4607f9e25f851e7343322041ce0ecc Mon Sep 17 00:00:00 2001
From: Vincent Stuyck <me@stuyckv.com>
Date: Sun, 2 Aug 2026 10:23:46 +0000
Subject: [PATCH] add san to certificates

---
 generate-certificates.sh | 21 ++++++++++++++++-----
 1 file changed, 16 insertions(+), 5 deletions(-)

diff --git a/generate-certificates.sh b/generate-certificates.sh
index ad9cb36..fdf1dc6 100755
--- a/generate-certificates.sh
+++ b/generate-certificates.sh
@@ -1,12 +1,23 @@
 
-[ -d ssl ] || mkdir ssl
+sudo rm -rf ./ssl ; mkdir ssl
 cd ssl
 
-# create root ca
-openssl req -x509 -newkey rsa:8192 -keyout ca.key -out ca.crt -days 36500 -nodes -subj "/CN=LGTM CA"
+hostname=$(hostname).stuyckv.local
 
-openssl req -new -newkey rsa:2048 -nodes -keyout server.key -out server.csr -subj "/CN=$(hostname).stuyckv.local"
-openssl x509 -req -in server.csr -CA ca.crt -CAkey ca.key -CAcreateserial -out server.crt -days 365
+echo "subjectAltName=DNS:shion.stuyckv.local,DNS:localhost,IP:127.0.0.1" > shion.san
+# create root ca
+openssl req -x509 -newkey rsa:8192 \
+    -keyout ca.key -out ca.crt \
+    -days 36500 -nodes -subj "/CN=LGTM CA"
+
+openssl req -new -newkey rsa:2048 \
+    -keyout server.key -out server.csr \
+    -nodes -subj "/CN=$hostname"
+openssl x509 -req -CAcreateserial \
+    -in server.csr -out server.crt \
+    -CA ca.crt -CAkey ca.key \
+    -days 365 -extfile shion.san
+cat ca.crt >> server.crt
 
 sudo chown 10001:10001 ./server.key ./server.crt ./ca.crt