Similar to the way the TLS Toolkit can generate multiple certificates with one command through parsing some minimal regular expression syntax in the hostname field, the SAN field should be processed the same way. Currently, a command which generates three hosts via -n "server[1-3].com" cannot have the corresponding SAN entries provided inline. Once
NIFI-4222 is implemented, the hostname will be present in the SAN list by default, but if there are additional desired entries, the command must be split and run individually.
|Desired hostname||Desired SAN|
Currently, this must be run as:
The ranges should be checked for length equality, but need not necessarily be identical. For example:
Today, if you don't care about SAN values, this is achievable with: