[Fedora-directory-users] Re: SubjectAltName how does it work?

[Alex aka Magobin]

> I also find this in Sun documentation:
> 
> certutil -R ...-CUT-... -a -8 amserv1.example.com,amserv2.example.com
> 

Ok, after reading document I see that certutil that cames with FDS
support subjectAltName...so I tried to make server certificate with this
extension but unfortunately doesn't work; I used the following

# ../shared/bin/certutil -R -d . -s 'CN=nodo1.domain.example.com -o
tmpcertreq -g 1024 -8 ldap.domain.example.com
# ../shared/bin/certutil -C -d . -c "CA Certificate" -i tmpcertreq -o
tmpcert.der -m 3 -v 120 -1 -5 -8 ldap.domain.example.com

# ../shared/bin/certutil -A -d . -n "nodo1.domain.example.com" -t u,u,u
-i tmpcert.der



...I supposed that it was correctly but I'm not sure...I don't find
anything about configuration certificate with subjectAltName extention.

Could someone suggest me the right way?

THANKS
Alex