1 Commits

Author SHA1 Message Date
ekzyis
4d4ce66404
Include localhost as SAN in CLN TLS certificates (#2479)
Before, we would get this error when trying to use cURL from the host machine:

```
$ curl https://localhost:9092/v1/list-methods --cacert docker/cln/ca.pem
curl: (60) SSL: certificate subject name 'cln' does not match target hostname 'localhost'
More details here: https://curl.se/docs/sslcerts.html

curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the webpage mentioned above.
```

This commit fixes it by including localhost in the alternative subject names of the TLS certificate.

I followed the instructions at https://docs.corelightning.org/docs/grpc#generating-custom-certificates-optional.
2025-09-02 14:25:41 -05:00