[CentOS] CentOS 7 getssl script

Mon May 31 11:50:20 UTC 2021
Tony Mountifield <tony at softins.co.uk>

In article <CABr8-B63cE0OEfmYV4otS8jrEp3f0p2PDB2+SX=hEats_HC4xw at mail.gmail.com>,
Jerry Geis <jerry.geis at gmail.com> wrote:
> I am using the getssl script to add a certificate to my server.
> The script is automatically adding a SANS www.myserver.com when I do not
> have a www.myserver.com - just simply the myserver.com
> How can I tell getssl to "not add that SANS" entry ?

getssl creates a default getssl.cfg for the domain the first time you run it
for that domain. But on subsequent runs, it just uses what is in that file.

So look in the file .getssl/myserver.com/getssl.cfg at the line SANS=

You can remove the unwanted entries from there, or comment out the line
if you don't want any additional domains at all in the certificate.

Tony Mountifield
Work: tony at softins.co.uk - http://www.softins.co.uk
Play: tony at mountifield.org - http://tony.mountifield.org