OpenSSL

James Kosin jkosin at beta.intcomgrp.com
Tue Jul 13 13:16:18 UTC 2004


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Fernando Gozalo wrote:
<<--snip-->>

|
| Last day I found this:
|
| ===================
| RFC 2830 also specifies a means for additional names to be set in a
| certificate. This is done using the subjectAltName field which is an
| X.509v3 extension of the basic certificate. This field can be used to list
| aliases for a server, shared names in a load-balancing setup, or any other
| desired purpose. A wildcard can also be used, to allow a single
| certificate to match all hostnames within a given domain.
|
| In the openssl.cnf file, the syntax for this extension is
|
| subjectAltName=DNS:alias1.domain1,DNS:host2.domain2,DNS:*.domain3
|
| Any number of names may be specified in the comma-separated list.
| ===================
|
| Maybe can help.
|
| Fernando.

Ok; but, how do I use this information properly.  I've already tried
using it but it doesn't seem to work.

Sorry, I'm not an openssl wizard.

I've attached my config file.

Thanks,
James
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (MingW32)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFA8+Chc7lFLjBWKW0RAjwIAJ9Fx0Igv4TNxtTCP+Es7IwXDlOMVwCdFQjD
QUokgalFMF+Lj5NMlaBv4B0=
=ymij
-----END PGP SIGNATURE-----
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: openssl.cnf
URL: <http://listman.redhat.com/archives/fedora-list/attachments/20040713/ccf2ea4b/attachment-0001.ksh>


More information about the fedora-list mailing list