On Mon, 2014-07-14 at 10:47 +0200, Bernhard Thalmayr wrote: > What is the reason, why certutil supports 'dNSName' GeneralNames for > SubjectAltName but not 'iPAddress' (RFC 3270 secion 4.2.1.7)?
Do you refer to the command line parameters -7 and -8 ? I don't know why this subset was chosen in the past. However, just recently we added support for additional SAN variations (in version 3.16.2), which provides the new parameter --extSAN. Can you try it? If it doesn't work as expected, please let us know. Kai -- dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto
