Autogenerated SSL certs use the wrong domain

[peanut]

tl;dr Proxmox is generating SSL certs for hostname.local rather than hostname.lan. How can I change this?

I'm following the instructions here:
https://pve.proxmox.com/wiki/HTTPS_Certificate_Configuration_(Version_4.x,_5.0_and_5.1)

I'm fine with using self-signed certs generated by Proxmox.

$ cat /etc/hostname
nuc

$ cat /etc/hosts
127.0.0.1 localhost.localdomain localhost
10.0.0.2 nuc.lan nuc

...

I ran:

$ rm /etc/pve/pve-root-ca.pem /etc/pve/priv/pve-root-ca.key /etc/pve/nodes/<node>/pve-ssl.pem /etc/pve/nodes/<node>/pve-ssl.key
$ pvecm updatecerts -f
$ systemctl restart pveproxy

I get a cert with the following Subject Alternative Names (SANs):

127.0.0.1
0000:0000:0000:0000:0000:0000:0000:0001
localhost
10.0.0.2
nuc
nuc.local

Why is this generated with nuc.local and not nuc.lan? How can I add nuc.lan?

Thanks!

 

[fabian]

for the self-signed cert, the search domain from /etc/resolv.conf is added to the hostname.

 

[peanut]

Awesome, that's exactly what I needed to fix the cert. Thank you!