Try to fix certs

DistributedCollective · Apr 19, 2024 · f885c36 · f885c36
1 parent 8ce1974
commit f885c36
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/bridge_node/scripts/create_node_certs.sh b/bridge_node/scripts/create_node_certs.sh
@@ -3,13 +3,13 @@
 NODE_NAME=$BRIDGE_HOSTNAME
 
 # Create node server key and certificate signing request (CSR)
-openssl req -new -nodes -newkey ec -pkeyopt ec_paramgen_curve:P-256 -out server.csr -keyout server-key.pem -subj "/O=Sovryn/CN=${NODE_NAME}" -addext "subjectAltName = DNS:${NODE_NAME}" -addext "extendedKeyUsage = serverAuth"
+openssl req -new -nodes -newkey ec -pkeyopt ec_paramgen_curve:P-256 -out server.csr -keyout server-key.pem -subj "/O=Sovryn/CN=$(hostname)" -addext "subjectAltName = IP:${NODE_NAME}" -addext "extendedKeyUsage = serverAuth"
 
 # Sign the node server CSR with the CA certificate
 openssl x509 -req -in server.csr -CA ca-cert.pem -CAkey ca-key.pem -CAcreateserial -out server-cert.pem -days 365
 
 # Create node client key and certificate signing request (CSR)
-openssl req -new -nodes -newkey ec -pkeyopt ec_paramgen_curve:P-256 -out client.csr -keyout client-key.pem -subj "/O=Sovryn/CN=${NODE_NAME}" -addext "subjectAltName = DNS:${NODE_NAME}" -addext "extendedKeyUsage = clientAuth"
+openssl req -new -nodes -newkey ec -pkeyopt ec_paramgen_curve:P-256 -out client.csr -keyout client-key.pem -subj "/O=Sovryn/CN=$(hostname)" -addext "subjectAltName = IP:${NODE_NAME}" -addext "extendedKeyUsage = clientAuth"
 
 # Sign the node client CSR with the CA certificate
 openssl x509 -req -in client.csr -CA ca-cert.pem -CAkey ca-key.pem -CAcreateserial -out client-cert.pem -days 365