I want to generate a proper certificate for iLO web console (iLO is a management engine for HP servers) using letsencrypt. AFAIK there's no way to install private key into iLO, so I've generated CSR from iLO. It contains the following field:

Requested Extensions:
    X509v3 Subject Alternative Name: 
        DNS:ilo.example.com, IP Address:

I've found no way to exclude IP Address part from CSR. I don't need it, I'll use only ilo.example.com. Now I issued

certbot certonly --manual --staging --preferred-challenges=dns --csr csr 

command, completed DNS verification, but got error:

An unexpected error occurred:
The request message was malformed :: Error creating new cert :: CSR contains one or more IP address fields
Please see the logfiles in /var/log/letsencrypt for more details.

AFAIK CSR is signed by private key, so I can't edit it. Can I ask letsencrypt to ignore IP address and issue certificate only for ilo.example.com? Or is there other way?


Here you go: https://community.letsencrypt.org/t/how-to-automatic-certificate-install-on-an-hp-ilo4-management-processor/31038

  1. Generate CSR
  2. Submit CSR to LE
  3. Install resulting cert

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.