Page History

...

The shell script is executed with two the following arguments:

• --dns (required)
  • The DNS hostname of the server that should be assigned the certificate. A server can be assigned more than one DNS hostname, for example the FQDN can extend the hostname. Only DNS hostnames that are added to the certificate can be used later on to establish secure HTTPS connections.
• --key-name
  • The basename of the key without extension. Default: root-ca
• --subject
  • The distinguished name that is used as the subject of the Server Certificate. Default: /C=DE/ST=Berlin/L=Berlin/O=SOS/OU=IT/CN=<dns>
  • The CN attribute must specify the server's hostname. By default the value of the first hostname specified with the --dns option is used.
• --days
  • The lifetime of the certificate is specified by the number of days. Default: 3652

...