Skip to content

Commit 5515c5b

Browse files
Fix certificate generation failure when SSL_ALT_NAME is empty
Co-Authored-By: Ryo Kobayashi <cuba6vst@gmail.com>
1 parent 7f551c0 commit 5515c5b

File tree

1 file changed

+7
-2
lines changed

1 file changed

+7
-2
lines changed

nginx/generate-ssl-cert.sh

Lines changed: 7 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -9,7 +9,12 @@ SAN=$SSL_ALT_NAME
99
if [ -f $KEY ] && [ -f $CERT ]; then
1010
echo "$ME: Server certificate already exists, do nothing."
1111
else
12-
openssl req -x509 -newkey rsa:2048 -keyout $KEY \
13-
-out $CERT -sha256 -days 3650 -nodes -subj "/CN=$CN" -addext "subjectAltName = $SAN"
12+
if [ -n "$SAN" ]; then
13+
openssl req -x509 -newkey rsa:2048 -keyout $KEY \
14+
-out $CERT -sha256 -days 3650 -nodes -subj "/CN=$CN" -addext "subjectAltName = $SAN"
15+
else
16+
openssl req -x509 -newkey rsa:2048 -keyout $KEY \
17+
-out $CERT -sha256 -days 3650 -nodes -subj "/CN=$CN"
18+
fi
1419
echo "$ME: Server certificate has been generated."
1520
fi

0 commit comments

Comments
 (0)