I want to generate a proper certificate for iLO web console (iLO is a management engine for HP servers) using letsencrypt. AFAIK there's no way to install private key into iLO, so I've generated CSR from iLO. It contains the following field:
Requested Extensions:
X509v3 Subject Alternative Name:
DNS:ilo.example.com, IP Address:192.168.1.11
I've found no way to exclude IP Address part from CSR. I don't need it, I'll use only ilo.example.com. Now I issued
certbot certonly --manual --staging --preferred-challenges=dns --csr csr
command, completed DNS verification, but got error:
An unexpected error occurred:
The request message was malformed :: Error creating new cert :: CSR contains one or more IP address fields
Please see the logfiles in /var/log/letsencrypt for more details.
AFAIK CSR is signed by private key, so I can't edit it. Can I ask letsencrypt to ignore IP address and issue certificate only for ilo.example.com? Or is there other way?
Best Answer
Here you go: https://community.letsencrypt.org/t/how-to-automatic-certificate-install-on-an-hp-ilo4-management-processor/31038