SubjectAltName syntax in openssl.cnf

classic Classic list List threaded Threaded
4 messages Options
Reply | Threaded
Open this post in threaded view
|

SubjectAltName syntax in openssl.cnf

DUPALUT, Benjamin
Hello,

i Have to set a SubjectAltName for a server certificate but documentations on the web does not provide the same syntax.

Is this syntax correct ?

subjectAltName=DNS:test.example.com

Also, does it belong in the [ usr_cert ] section ?

Thank you for your help.

Regards,

Benjamin Dupalut
Ingénieur système et réseau
Service Informatique, Télécommunications, Audiovisuel et Reprographie (SITAR)
ESIEE Paris
2 bd Blaise Pascal - 93162 Noisy-le-Grand Cedex
T : +33 1 45 92 66 17
[hidden email]
www.esiee.fr / www.cci-paris-idf.fr

--
openssl-users mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users
Reply | Threaded
Open this post in threaded view
|

Re: SubjectAltName syntax in openssl.cnf

DUPALUT, Benjamin
Hello,

Does anyone, please, have informations about my question ?

Thanks in advance.

Cordialement,

Benjamin Dupalut
Ingénieur système et réseau
Service Informatique, Télécommunications, Audiovisuel et Reprographie (SITAR)
ESIEE Paris
2 bd Blaise Pascal - 93162 Noisy-le-Grand Cedex
T : +33 1 45 92 66 17
[hidden email]
www.esiee.fr / www.cci-paris-idf.fr


Le ven. 28 sept. 2018 à 18:00, DUPALUT, Benjamin <[hidden email]> a écrit :
Hello,

i Have to set a SubjectAltName for a server certificate but documentations on the web does not provide the same syntax.

Is this syntax correct ?

subjectAltName=DNS:test.example.com

Also, does it belong in the [ usr_cert ] section ?

Thank you for your help.

Regards,

Benjamin Dupalut
Ingénieur système et réseau
Service Informatique, Télécommunications, Audiovisuel et Reprographie (SITAR)
ESIEE Paris
2 bd Blaise Pascal - 93162 Noisy-le-Grand Cedex
T : +33 1 45 92 66 17
[hidden email]
www.esiee.fr / www.cci-paris-idf.fr

--
openssl-users mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users
Reply | Threaded
Open this post in threaded view
|

Re: SubjectAltName syntax in openssl.cnf

Dave Coombs
Hello,

That syntax looks correct, yes.  It belongs in the [section] name you are passing to the "-extensions" argument on the "openssl ca" command when issuing the certificate.

I hope this helps.
  -Dave


On Oct 2, 2018, at 05:47, DUPALUT, Benjamin <[hidden email]> wrote:

Hello,

Does anyone, please, have informations about my question ?

Thanks in advance.

Cordialement,

Benjamin Dupalut
Ingénieur système et réseau
Service Informatique, Télécommunications, Audiovisuel et Reprographie (SITAR)
ESIEE Paris
2 bd Blaise Pascal - 93162 Noisy-le-Grand Cedex
T : +33 1 45 92 66 17
[hidden email]
www.esiee.fr / www.cci-paris-idf.fr


Le ven. 28 sept. 2018 à 18:00, DUPALUT, Benjamin <[hidden email]> a écrit :
Hello,

i Have to set a SubjectAltName for a server certificate but documentations on the web does not provide the same syntax.

Is this syntax correct ?

subjectAltName=DNS:test.example.com

Also, does it belong in the [ usr_cert ] section ?

Thank you for your help.

Regards,

Benjamin Dupalut
Ingénieur système et réseau
Service Informatique, Télécommunications, Audiovisuel et Reprographie (SITAR)
ESIEE Paris
2 bd Blaise Pascal - 93162 Noisy-le-Grand Cedex
T : +33 1 45 92 66 17
[hidden email]
www.esiee.fr / www.cci-paris-idf.fr
--
openssl-users mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users


--
openssl-users mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users
Reply | Threaded
Open this post in threaded view
|

Re: SubjectAltName syntax in openssl.cnf

DUPALUT, Benjamin
Hi Dave,

Thank you for your answer.

Cordialement,

Benjamin Dupalut
Ingénieur système et réseau
Service Informatique, Télécommunications, Audiovisuel et Reprographie (SITAR)
ESIEE Paris
2 bd Blaise Pascal - 93162 Noisy-le-Grand Cedex
T : +33 1 45 92 66 17
[hidden email]
www.esiee.fr / www.cci-paris-idf.fr


Le mar. 2 oct. 2018 à 15:12, Dave Coombs <[hidden email]> a écrit :
Hello,

That syntax looks correct, yes.  It belongs in the [section] name you are passing to the "-extensions" argument on the "openssl ca" command when issuing the certificate.

I hope this helps.
  -Dave


On Oct 2, 2018, at 05:47, DUPALUT, Benjamin <[hidden email]> wrote:

Hello,

Does anyone, please, have informations about my question ?

Thanks in advance.

Cordialement,

Benjamin Dupalut
Ingénieur système et réseau
Service Informatique, Télécommunications, Audiovisuel et Reprographie (SITAR)
ESIEE Paris
2 bd Blaise Pascal - 93162 Noisy-le-Grand Cedex
T : +33 1 45 92 66 17
[hidden email]
www.esiee.fr / www.cci-paris-idf.fr


Le ven. 28 sept. 2018 à 18:00, DUPALUT, Benjamin <[hidden email]> a écrit :
Hello,

i Have to set a SubjectAltName for a server certificate but documentations on the web does not provide the same syntax.

Is this syntax correct ?

subjectAltName=DNS:test.example.com

Also, does it belong in the [ usr_cert ] section ?

Thank you for your help.

Regards,

Benjamin Dupalut
Ingénieur système et réseau
Service Informatique, Télécommunications, Audiovisuel et Reprographie (SITAR)
ESIEE Paris
2 bd Blaise Pascal - 93162 Noisy-le-Grand Cedex
T : +33 1 45 92 66 17
[hidden email]
www.esiee.fr / www.cci-paris-idf.fr
--
openssl-users mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users

--
openssl-users mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users

--
openssl-users mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users