IP: 5.5.5.5 is not in the cert's list #1

Новая задача

Ghost · 2021-07-27T15:36:28Z

Ghost прокомментировал(а)

2021-07-27 15:36:28 +00:00

Getting this error
Error [ERR_TLS_CERT_ALTNAME_INVALID]: Hostname/IP does not match certificate's altnames: IP: 5.5.5.5 is not in the cert's list:

Added -addext "subjectAltName=IP:5.5.5.5" to openssl req in https://git.coolaj86.com/coolaj86/nodejs-self-signed-certificate-example/src/branch/master/make-root-ca-and-certificates.sh Still getting same error

Getting this error `Error [ERR_TLS_CERT_ALTNAME_INVALID]: Hostname/IP does not match certificate's altnames: IP: 5.5.5.5 is not in the cert's list: ` Added `-addext "subjectAltName=IP:5.5.5.5"` to `openssl req` in https://git.coolaj86.com/coolaj86/nodejs-self-signed-certificate-example/src/branch/master/make-root-ca-and-certificates.sh Still getting same error

Ghost прокомментировал(а)

2021-07-27 16:23:14 +00:00

Автор

It worked. had to add the below in client nodejs code

checkServerIdentity: function (host, cert) {
  return undefined;
}

It worked. had to add the below in client nodejs code ``` checkServerIdentity: function (host, cert) { return undefined; } ```

coolaj86 прокомментировал(а)

2021-07-27 19:10:19 +00:00

Владелец

That's not working. That's entirely crippling the security of your system, guaranteeing that an attacker can use any forged certificate.

You disabled SSL, essentially.

That's not working. That's entirely crippling the security of your system, guaranteeing that an attacker can use any forged certificate. You disabled SSL, essentially.

Ghost прокомментировал(а)

2021-07-28 16:52:58 +00:00

Автор

That's not working. That's entirely crippling the security of your system, guaranteeing that an attacker can use any forged certificate.

You disabled SSL, essentially.

So the below code almost disables SSL?

checkServerIdentity: function (host, cert) {
  return undefined;
}

Why do I get IP is not in the cert's list error although I did add -addext "subjectAltName=IP:5.5.5.5 ?

> That's not working. That's entirely crippling the security of your system, guaranteeing that an attacker can use any forged certificate. > > You disabled SSL, essentially. So the below code almost disables SSL? ``` checkServerIdentity: function (host, cert) { return undefined; } ``` Why do I get IP is not in the cert's list error although I did add -`addext "subjectAltName=IP:5.5.5.5` ?

Войдите, чтобы присоединиться к обсуждению.

2 участников

Уведомления

Срок выполнения

Срок выполнения не установлен.

Зависимости

Зависимостей нет.

Ссылка: coolaj86/nodejs-self-signed-certificate-example#1