Re: [OpenXPKI-users] SAN / Wildcard

2020-11-13 Thread Martin Bartosch via OpenXPKI-users
Hi Alexandre, > I would like to take this opportunity to ask you another question : > With openxpki, do you know if it is possible to generate SAN and Wildcard > certificates? Thou shalt not use wildcard certificates. https://tools.ietf.org/html/rfc6125#section-7.2 That stated, yes, it is possi

Re: [OpenXPKI-users] SAN / Wildcard

2020-11-13 Thread Oliver Welter
Hi, you can create almost any x509v3 certificate with OpenXPKI - support for "normal" SAN DNS items is already in the sample profiles, for wildcard you need to modify the regular expressions used for input validation in the profiles. Oliver Am 13.11.20 um 17:21 schrieb Alexandre Berthault: > Hel

[OpenXPKI-users] SAN / Wildcard

2020-11-13 Thread Alexandre Berthault
Hello, Thank you for your response Oliver. A simple cronjob for the CRL allows to perform the revocation operations 🙂 I would like to take this opportunity to ask you another question : With openxpki, do you know if it is possible to generate SAN and Wildcard certificates? Thank you. _