SSL: Multi Domain

Sumber: https://www.thesecmaster.com/how-to-generate-a-csr-for-multi-domain-ssl-certificates-using-openssl/

openssl config di ubah

Edit

/etc/ssl/openssl.cnf

atau

/usr/lib/ssl/openssl.cnf

Di bagian [ req ], buka # agar

req_extensions = v3_req

Di bagian [ v3_req ] tambahkan

subjectAltName = @alt_names

Di bagian bawah tambahkan

[ alt_names ]
DNS.1 = www.exampledomain.com
DNS.2 = exampledomain.com
DNS.3 = thesecmaster.local
DNS.4 = mydomain.local

private key generate

Lakukan tanpa pass phrase

openssl genrsa -out example.com.key 2048

Certificate Signing Request (CSR) generate

openssl req -new -key example.com.key -out example.com.csr -config example.com.cnf

test

openssl req -in example.com.csr -noout -text

Referensi

• https://www.thesecmaster.com/how-to-generate-a-csr-for-multi-domain-ssl-certificates-using-openssl/