Hello, i have a self signed certificate, i try to enrole a windows client. Unfortunately i get a bad certificate error on the server. I looked through here for solutions. Unfortunately, the provided links in the faqs don't seem to exist anymore. I generated the certificate with CN and SAN. I generate the install package with --fleet-certificate. When i try to login to fleetctl the error message is:
"tls: failed to verify certificate: x509: certificate relies on legacy Common Name field, use SANs instead"
the config used to generate the certificate looks like this (i use my server/domainname):
[req]
prompt = no
distinguished_name = dn
[dn]
CN = example.com
[req_ext]
subjectAltName = alt_names
[alt_names]
DNS.1 = example.com
DNS.2 = www.example.com
Would anybody be so kind to help me, please?