On Wed, May 18, 2005, Marton Anka wrote: > Hello, > > I'm trying to make subject alternative names work as extensions specified in > the request and not during the signing process. > > I can specify "subjectAltName = DNS:whatever" in the extensions section of > the configuration file. If I do this during signing the request (as a CA) > then the signed certificate will have the subjectAltName extension in it. > > If, however, I specify subjectAltName in the configuration file while > generating a request then the request will have an extension stating the > alternative names, but the signed certificate will not. >
Look for "copy_extensions" in the ca manual page. Steve. -- Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage OpenSSL project core developer and freelance consultant. Funding needed! Details on homepage. Homepage: http://www.drh-consultancy.demon.co.uk ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]
