Re: [Pki-users] Assistance with creating and submitting a Windows LDAPS Certificate; PKI 10.3.3
>
> > [Extensions]
> > 2.5.29.17 = "dns=ad.winauth.mydomain.net&"
> > _continue_ = "dn=CN=AD,OU=Domain Controllers,DC=winauth,DC=mydo
> main,DC=net&"
> > _continue_ = "ipaddress=192.168.1.1&"
> >
>
I got it! Essentially, I didn't follow the instructions. Note the missing
"{text}" above! I thought the author was giving an example so excluded it.
After a night's sleep, I checked my erroneous assumption.
[Extensions]
2.5.29.17 = "{text}"
_continue_ = "dns=ad.winauth.mydomain.net&"
_continue_ = "dn=CN=AD,OU=Domain
Controllers,DC=winauth,DC=maydomain,DC=net&"
_continue_ = "ipaddress=192.168.1.1&"
Thank you for your help Fraser.
I reviewed the suggested log, thank you, which clearly showed DogTag
complaining about something being provided in the CSR. I couldn't interpret
exactly what was the problem but I removed the one thing I had never done
before, the [Extensions] stanza with the SAN.
I successfully submitted!
What is the correct method to provide a 'Subject Alternative Name" in a
CSR to DogTag? Or am I going about this all wrong? I was intending to
provide FQDN, IP address, and DN in the SAN.
Thank you,
Richard
Attachments:
- attachment.html (text/html — 2.2 KB)