binding IP addresses to X.509 certificates for use with OpenSSL?

2001-11-29 Thread Coughlan, Brian
Hi Guys, I have come accross an issue here, where some fellow designers want to generate an x.509 certificate for use with OpenSSL, but they want to specifically bind the generated cert to only be used with one individual IP address. Is this possible? I have been doing a bit of reading up

RE: binding IP addresses to X.509 certificates for use with OpenSSL?

2001-11-29 Thread Andy Schneider
You can use altSubjectName for the IP address but you'll have to do the validation yourself (AFAIK) since OpenSSL doesn't. A cert is normally just specifies the DNS name of the server but I've encountered clients who want to lock things down more tightly than that (so they are immune to a DNS

Re: binding IP addresses to X.509 certificates for use with OpenSSL?

2001-11-29 Thread Joern Sierwald
At 09:52 29.11.2001 +, you wrote: Hi Guys, I have come accross an issue here, where some fellow designers want to generate an x.509 certificate for use with OpenSSL, but they want to specifically bind the generated cert to only be used with one individual IP address. Is this possible? I