rfc8738: fix CN on certs with mixed ip+dns

diff --git a/dehydrated b/dehydrated
index e5b97830e803690af0ce3dc1020530eb9affb2ea..9474d77c2675fa5954360ab71f4ebac0d5f5fffa 100755 (executable)
--- a/dehydrated
+++ b/dehydrated
@@ -1467,12 +1467,15 @@ sign_domain() {
     for altname in ${altnames}; do
       if [[ "${altname}" =~ ^ip: ]]; then
         SAN="${SAN}IP:${altname:3}, "
-        SUBJ="/CN=${domain:3}/"
       else
         SAN="${SAN}DNS:${altname}, "
-        SUBJ="/CN=${domain}/"
       fi
     done
+    if [[ "${domain}" =~ ^ip: ]]; then
+      SUBJ="/CN=${domain:3}/"
+    else
+      SUBJ="/CN=${domain}/"
+    fi
     SAN="${SAN%%, }"
     local tmp_openssl_cnf
     tmp_openssl_cnf="$(_mktemp)"