diff options
| author | Guilhem Moulin <guilhem@fripost.org> | 2024-06-13 03:33:11 +0200 |
|---|---|---|
| committer | Guilhem Moulin <guilhem@fripost.org> | 2024-06-13 15:40:56 +0200 |
| commit | a41444b8b1fe5349a4a33c45f1e96036845609bb (patch) | |
| tree | 38d58e8f0efe45fbf560f2fce2d31bd9a5be33f0 | |
| parent | 3be911f0cf34dd8048d9ddf084950f964d4cd3dd (diff) | |
t/cert-install: Ensure the subjectName is lowercase.
Domain names are case insensitive so it shouldn't matter, but Let's
Encrypt (staging) ACME server fails with
400 Bad Request (Invalid identifiers requested :: Cannot issue for "YXJCTT7S6K2RQLVO.lacme-test.guilhem.org": Domain name contains an invalid character)
if the sub-domain part of the subjectName is left all-caps.
| -rw-r--r-- | tests/cert-install | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/tests/cert-install b/tests/cert-install index 4b3e820..4182790 100644 --- a/tests/cert-install +++ b/tests/cert-install @@ -30,7 +30,7 @@ grepstderr -Fxq "[bad3] Warning: Couldn't generate CSR, skipping" # 'certificate' installs only the leaf certificate openssl genpkey -algorithm RSA -out /etc/lacme/test1.key -subject="/CN=$(head -c10 /dev/urandom | base32 -w0).$DOMAINNAME" +subject="/CN=$(head -c10 /dev/urandom | base32 -w0 | tr "A-Z" "a-z").$DOMAINNAME" cat >"/etc/lacme/lacme-certs.conf.d/test1.conf" <<- EOF [test1] certificate-key = /etc/lacme/test1.key |