fix: cfssl provider support SAN URI

cloudflare · Dec 9, 2020 · 763faa7 · 763faa7
1 parent a538700
commit 763faa7
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/transport/ca/cfssl_provider.go b/transport/ca/cfssl_provider.go
@@ -206,13 +206,17 @@ func (cap *CFSSL) SignCSR(csrPEM []byte) (cert []byte, err error) {
 		return nil, err
 	}
 
-	hosts := make([]string, len(csr.DNSNames), len(csr.DNSNames)+len(csr.IPAddresses))
+	hosts := make([]string, len(csr.DNSNames), len(csr.DNSNames)+len(csr.IPAddresses)+len(csr.URIs))
 	copy(hosts, csr.DNSNames)
 
 	for i := range csr.IPAddresses {
 		hosts = append(hosts, csr.IPAddresses[i].String())
 	}
 
+	for i := range csr.URIs {
+		hosts = append(hosts, csr.URIs[i].String())
+	}
+
 	sreq := &signer.SignRequest{
 		Hosts:   hosts,
 		Request: string(csrPEM),