From eefc9cfcb6c2898911d5f01c79398c24237771fe Mon Sep 17 00:00:00 2001
From: Mike Reeves <mike.reeves@securityonionsolutions.com>
Date: Mon, 8 Nov 2021 16:50:43 -0500
Subject: [PATCH] Enable Subject Alt Name for registry

---
 salt/ssl/init.sls | 1 +
 1 file changed, 1 insertion(+)

diff --git a/salt/ssl/init.sls b/salt/ssl/init.sls
index a9aa66703..da71cc708 100644
--- a/salt/ssl/init.sls
+++ b/salt/ssl/init.sls
@@ -269,6 +269,7 @@ registry_crt:
   x509.certificate_managed:
     - name: /etc/pki/registry.crt
     - ca_server: {{ ca_server }}
+    - subjectAltName: DNS:{{ manager }}, IP:{{ managerip }} 
     - signing_policy: registry
     - public_key: /etc/pki/registry.key
     - CN: {{ manager }}