diff options
author | rsiddharth <s@ricketyspace.net> | 2020-04-25 14:20:38 -0400 |
---|---|---|
committer | rsiddharth <s@ricketyspace.net> | 2020-04-25 14:20:38 -0400 |
commit | 658419dae30bf8a997a7b6612b1e113b30852705 (patch) | |
tree | df24f19a46cd3ee824e9cca9cffbefef0d94c6fe /README.md | |
parent | b05800eabc9533264edafcdc6332883ee1cf9b71 (diff) |
acmens.py: Update sign_csr.
* acmens.py (sign_csr): Process just one domain.
* README.md: Update 'getting/renewing a certificate' section.
Diffstat (limited to 'README.md')
-rw-r--r-- | README.md | 10 |
1 files changed, 4 insertions, 6 deletions
@@ -32,13 +32,11 @@ This is the key that you will get signed for free for your domain (replace and CSR for your domain, you can skip this step. ```sh -#Create a CSR for example.com -openssl genrsa -aes256 4096 > domain.key -openssl req -new -sha256 -key domain.key -subj "/CN=example.com" > domain.csr +# Generate domain key. +openssl genrsa -aes256 -out domain.key 4096 -#Alternatively, if you want both example.com and www.example.com -openssl genrsa -aes256 4096 > domain.key -openssl req -new -sha256 -key domain.key -subj "/" -reqexts SAN -config <(cat /etc/ssl/openssl.cnf <(printf "[SAN]\nsubjectAltName=DNS:example.com,DNS:www.example.com")) > domain.csr +# Generate CSR +openssl req -new -sha256 -key domain.key -out domain.csr ``` Third, you run the script using python and passing in the path to your user |