[Pki-users] SAN Feild in the MSCE profile

John Magne jmagne at redhat.com
Thu Nov 5 22:11:44 UTC 2015


You should be able to do this:

First for info on profiles and how to make new ones start here:
https://access.redhat.com/documentation/en-US/Red_Hat_Certificate_System/8.1/html/Admin_Guide/Certificate_Profiles.html#about-certificate-profiles



If you look in this directory:

/var/lib/pki/pki-tomcat/ca/profiles/ca

This is where the raw profile files are. Looking through these should provide an example of somebody using the subject alt name extension.
Whatever happening there can be created in a new profile.


----- Original Message -----
From: "Rafael Leiva-Ochoa" <spawn at rloteck.net>
To: pki-users at redhat.com
Sent: Thursday, November 5, 2015 12:52:38 PM
Subject: [Pki-users] SAN Feild in the MSCE profile

Hi Pki-Users, 

I am trying to create a cert using a CSR that has more then one CN using the Manuel Server Certificate Enrollment (MSCE) profile, but it seem that it does not support a SAN Feild by default. Can I create a custom profile that duplicates the MSCE profile, but adds the SAN Feild? Is so, what is the process for doing that? 

Thanks, 

Rafael 

_______________________________________________
Pki-users mailing list
Pki-users at redhat.com
https://www.redhat.com/mailman/listinfo/pki-users




More information about the Pki-users mailing list