From 332ec2d38bae5bebf8c8a24a676e692b29c2893b Mon Sep 17 00:00:00 2001
From: Xavier Bachelot <xavier@bachelot.org>
Date: Mon, 28 Jan 2019 21:39:00 +0100
Subject: [PATCH] Prevent using an empty SAN

Signed-off-by: Xavier Bachelot <xavier@bachelot.org>
---
 easyrsa3/easyrsa | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/easyrsa3/easyrsa b/easyrsa3/easyrsa
index 4066f41..00fc0cd 100755
--- a/easyrsa3/easyrsa
+++ b/easyrsa3/easyrsa
@@ -1040,7 +1040,7 @@ Renewal not allowed."
 			"$EASYRSA_OPENSSL" x509 -in "$crt_in" -noout -text |
 			sed -n "/X509v3 Subject Alternative Name:/{n;s/ //g;p;}"
 			)
-		export EASYRSA_EXTRA_EXTS="\
+		[ -n "$san" ] && export EASYRSA_EXTRA_EXTS="\
 $EASYRSA_EXTRA_EXTS
 subjectAltName = $san"
 	}