From f647c14107cbad77cce637567a0cab0b54cc4eed Mon Sep 17 00:00:00 2001
From: ericnicolaides <161697062+ericnicolaides@users.noreply.github.com>
Date: Sun, 3 Aug 2025 18:11:04 +0000
Subject: [PATCH] Added SAN Prompt

Added guided prompt to create SAN string removing need for EXPORT string before running
---
 scripts/tls/cert-gen | 18 +++++++++++++++---
 1 file changed, 15 insertions(+), 3 deletions(-)

diff --git a/scripts/tls/cert-gen b/scripts/tls/cert-gen
index 3af0fb162..0056936e5 100755
--- a/scripts/tls/cert-gen
+++ b/scripts/tls/cert-gen
@@ -5,9 +5,21 @@ set -e
 rm -f ca.key ca.crt server.key server.csr server.crt client.key client.csr client.crt index.* serial*
 rm -rf certs crl newcerts
 
-if [ -z $SAN ]
-  then echo "Set SAN with a DNS or IP for matchbox (e.g. export SAN=DNS.1:matchbox.example.com,IP.1:172.17.0.2)."
-  exit 1
+if [ -z "$SAN" ]; then
+  echo "Configure matchbox certificate:"
+  echo -n "FQDN: "
+  read -r FQDN
+  echo -n "IP: "
+  read -r IP
+  
+  if [ -z "$FQDN" ] || [ -z "$IP" ]; then
+    echo "Error: Both FQDN and IP are required"
+    exit 1
+  fi
+  
+  SAN="DNS.1:${FQDN},IP.1:${IP}"
+  export SAN
+  echo "Using SAN: $SAN"
 fi
 
 echo "Creating example CA, server cert/key, and client cert/key..."