Final test: Web stack

Read the output

What will you do so that www.shop.lab.test opens without an error?

$ curl https://www.shop.lab.test/
curl: (60) SSL: no alternative certificate subject name matches target host name 'www.shop.lab.test'
$ openssl x509 -in /etc/nginx/tls/shop.crt -noout -ext subjectAltName
X509v3 Subject Alternative Name:
    DNS:shop.lab.test

• A Open the site with curl -k.
• B Issue a certificate with CN = www.shop.lab.test in the subject.
• C Add www.shop.lab.test to server_name.
• D Issue a certificate with both names in the SAN and put it into nginx.