Not able to create a certificate using my own CSR

_az · April 6, 2018, 9:16pm

It also struck me as odd, but turns out it's there:

letsencrypt/boulder/blob/c591f8aef440744e8cba7c2987550f725af6a387/csr/csr.go#L96


      
          			err = pa.WillingToIssueWildcard(ident)
          		} else {
          			// Otherwise use WillingToIssue
          			err = pa.WillingToIssue(ident)
          		}
          		if err != nil {
          			badNames = append(badNames, fmt.Sprintf("%q", name))
          		}
          	}
          	if len(badNames) > 0 {
          		return fmt.Errorf("policy forbids issuing for: %s", strings.Join(badNames, ", "))
          	}
          	return nil
          }
          
          // normalizeCSR deduplicates and lowers the case of dNSNames and the subject CN.
          // If forceCNFromSAN is true it will also hoist a dNSName into the CN if it is empty.
          func normalizeCSR(csr *x509.CertificateRequest, forceCNFromSAN bool) {
          	if forceCNFromSAN && csr.Subject.CommonName == "" {
          		if len(csr.DNSNames) > 0 {
          			csr.Subject.CommonName = csr.DNSNames[0]