From cea717db3e5f56f696a08b3dccc488a51bb7278a Mon Sep 17 00:00:00 2001 From: alexzorin Date: Thu, 2 Feb 2023 05:49:37 +1100 Subject: [PATCH] docs: update -d flag copy to be CA-agnostic (#9542) Some confusion ensued in [this community thread](https://community.letsencrypt.org/t/connection-between-ios-9-support-and-subject-common-name-or-x509v3-subject-alternative-name-critical/191619) about the Subject CN, which Certbot omits from the CSR, Let's Encrypt includes in the issued certificate, but some other CAs do not. It's probably for the best that we do not entomb Let's Encrypt's current issuance practices in Certbot's documentation. --- certbot/certbot/_internal/cli/__init__.py | 17 ++++++----------- 1 file changed, 6 insertions(+), 11 deletions(-) diff --git a/certbot/certbot/_internal/cli/__init__.py b/certbot/certbot/_internal/cli/__init__.py index d3f4a2cbe..9013b8249 100644 --- a/certbot/certbot/_internal/cli/__init__.py +++ b/certbot/certbot/_internal/cli/__init__.py @@ -115,17 +115,12 @@ def prepare_and_parse_args(plugins: plugins_disco.PluginsRegistry, args: List[st "-d", "--domains", "--domain", dest="domains", metavar="DOMAIN", action=_DomainsAction, default=flag_default("domains"), - help="Domain names to apply. For multiple domains you can use " - "multiple -d flags or enter a comma separated list of domains " - "as a parameter. The first domain provided will be the " - "subject CN of the certificate, and all domains will be " - "Subject Alternative Names on the certificate. " - "The first domain will also be used in " - "some software user interfaces and as the file paths for the " - "certificate and related material unless otherwise " - "specified or you already have a certificate with the same " - "name. In the case of a name collision it will append a number " - "like 0001 to the file path name. (default: Ask)") + help="Domain names to include. For multiple domains you can use multiple -d flags " + "or enter a comma separated list of domains as a parameter. All domains will " + "be included as Subject Alternative Names on the certificate. The first domain " + "will be used as the certificate name, unless otherwise specified or if you " + "already have a certificate with the same name. In the case of a name conflict, " + "a number like -0001 will be appended to the certificate name. (default: Ask)") helpful.add( [None, "run", "certonly", "register"], "--eab-kid", dest="eab_kid",