Hi,
for better usability the internal linuxmuster server certificate should include a SAN entry, So modern browsers wont bring a warning if the ca certificate is added to the trusted certification authorities when you call the schulkonsole webUI.
Example for cnf-File for the certificate signing request (CSR):
[ req ]
default_bits = 2048
prompt = no
default_md = sha256
req_extensions = req_ext
distinguished_name = dn
[ dn ]
CN = LINUXMUSTER.LAN
OU = LINUXMUSTER
O = Grundschule Linuxmuster
[ req_ext ]
subjectAltName = @alt_names
[ alt_names ]
DNS.1 = server.linuxmuster.lan
Thx in advance and kind regards,
Frank