Before, we would get this error when trying to use cURL from the host machine: ``` $ curl https://localhost:9092/v1/list-methods --cacert docker/cln/ca.pem curl: (60) SSL: certificate subject name 'cln' does not match target hostname 'localhost' More details here: https://curl.se/docs/sslcerts.html curl failed to verify the legitimacy of the server and therefore could not establish a secure connection to it. To learn more about this situation and how to fix it, please visit the webpage mentioned above. ``` This commit fixes it by including localhost in the alternative subject names of the TLS certificate. I followed the instructions at https://docs.corelightning.org/docs/grpc#generating-custom-certificates-optional.
17 lines
278 B
Plaintext
17 lines
278 B
Plaintext
[req]
|
|
default_bits = 2048
|
|
distinguished_name = req_distinguished_name
|
|
req_extensions = req_ext
|
|
prompt = no
|
|
|
|
[req_distinguished_name]
|
|
CN = "cln rest server"
|
|
|
|
[req_ext]
|
|
subjectAltName = @alt_names
|
|
|
|
[alt_names]
|
|
IP.1 = 127.0.0.1
|
|
DNS.1 = localhost
|
|
DNS.2 = cln
|