Mastodawn

My ACME certificates generated by step-ca don't have a "subject" but they have SANs. Unfortunately, OpenVPN seens to require a subject to work.

#openvpn #stepca #tls #acme

Show thread

Eashwar 3d ago

@jriou Is that really because of step-ca? The ACME client is the one that generates the CSR and includes the subject in it right?

Show thread

Julien Riou 3d ago

@e_nomem I'm using certbot with the `-d` switch.

On my VPS, I'm using the same version for Let's Encrypt and my own CA. The ones generated by Let's Encrypt have the correct subject, the one for my own CA doesn't.

Show thread

Julien Riou

@e_nomem https://github.com/certbot/certbot/issues/6463

subject CN is no longer set · Issue #6463 · certbot/certbot

If you're having trouble using Certbot and aren't sure you've found a bug or request for a new feature, please first try asking for help at https://community.letsencrypt.org/. There is a much large...

GitHub