TLS certificate includes blank X509v3 Subject Alternative Name

[NodeGuy]

Summary of Bug

The X509v3 Subject Alternative Name DNS field in the TLS certificate is blank, causing an error in a client when it attempts to connect to the REST server.

Steps to Reproduce

$ gaiacli version
0.24.2-839-gce23ad41
$ gaiacli rest-server --trust-node=true
I[11-01|23:02:30.801] Starting RPC HTTPS server on tcp://localhost:1317 (cert: "/var/folders/wj/0h36fvtj03q0y9lf0n9c0nxc0000gp/T/cert_209481810", key: "/var/folders/wj/0h36fvtj03q0y9lf0n9c0nxc0000gp/T/key_803768713") module=rest-server

In another console:

$ openssl x509 -in /var/folders/wj/0h36fvtj03q0y9lf0n9c0nxc0000gp/T/cert_209481810 -text -noout
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            fd:4e:45:2e:bc:9e:6e:1b:8f:22:42:74:bb:83:a2:7a
    Signature Algorithm: ecdsa-with-SHA256
        Issuer: O=Gaia Lite
        Validity
            Not Before: Nov  2 03:02:30 2018 GMT
            Not After : Dec  2 03:02:30 2018 GMT
        Subject: O=Gaia Lite
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub: 
                    04:48:78:b2:ed:ee:f9:19:13:6b:9b:00:57:34:ab:
                    88:35:41:f1:3c:ec:56:a8:08:c6:74:2f:8b:9f:5a:
                    fd:9c:db:9d:17:27:60:38:d0:06:79:86:58:e8:5b:
                    6b:d3:81:0d:0a:dd:13:1d:3d:ef:88:89:b5:81:8c:
                    5f:d9:47:42:69
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment, Certificate Sign
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Alternative Name: 
                DNS:
    Signature Algorithm: ecdsa-with-SHA256
         30:45:02:21:00:ea:14:92:a2:b0:57:2d:57:72:14:6b:a6:07:
         c0:4e:2d:48:18:08:73:a0:fe:44:a3:2d:10:6c:da:33:fb:45:
         6e:02:20:56:4c:af:d1:76:4c:e2:3c:d2:fc:ec:97:eb:e4:2e:
         7d:5e:cb:34:23:24:f5:59:d4:be:9b:cd:24:cc:cc:81:72

$ curl --cacert /var/folders/wj/0h36fvtj03q0y9lf0n9c0nxc0000gp/T/cert_209481810 https://localhost:1317/node_version
curl: (51) SSL: no alternative certificate subject name matches target host name 'localhost'

---

For Admin Use

• Not duplicate issue
• Appropriate labels applied
• Appropriate contributors tagged
• Contributor assigned/self-assigned

[alessio]

This should work I guess:

$ openssl x509 -in /tmp/cert_546561472 -text -noout
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:77:d7:fa:36:a3:df:9a:fe:0b:03:33:5a:e6:a2:82
    Signature Algorithm: ecdsa-with-SHA256
        Issuer: O = Gaia Lite
        Validity
            Not Before: Nov  2 08:16:23 2018 GMT
            Not After : Dec  2 08:16:23 2018 GMT
        Subject: O = Gaia Lite
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub:
                    04:d7:81:b6:0e:c9:f6:c8:27:ee:d6:52:c9:74:e2:
                    f8:58:db:ea:99:17:50:c1:c8:fc:44:67:3a:62:36:
                    12:64:6e:28:21:5b:96:0a:42:f2:07:6e:68:17:d0:
                    bc:ca:f8:4d:df:01:c7:86:b8:ab:a1:9e:a5:9f:f4:
                    46:21:6a:d6:98
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment, Certificate Sign
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Alternative Name: 
                DNS:localhost, DNS:
    Signature Algorithm: ecdsa-with-SHA256
         30:45:02:20:73:26:3c:e8:7a:aa:ba:1d:52:32:c5:35:de:f7:
         9f:0a:b9:5b:10:66:b9:84:8b:86:d6:15:5c:f4:83:32:99:c5:
         02:21:00:be:6e:d9:39:a9:d6:57:e2:39:ca:9a:c4:65:4a:4e:
         d8:72:4d:99:92:c1:94:fe:3e:d9:cd:e3:20:20:5c:0e:62