Re: [Pki-users] SAN:howt is it possible to sign certificate requests with DNS alias names?

Hi, here the section in my profile. With this extionsion, you can easily put the SAN Names in your certificate request. policyset.webprofile.10.constraint.class_id=noConstraintImpl policyset. webprofile.10.constraint.name=No Constraint policyset. webprofile.10.constraint.subjAltNameExtCritical=false policyset. webprofile.10.default.class_id=userExtensionDefaultImpl policyset. webprofile.10.default.name=User Supplied Extension Default policyset. webprofile.10.default.params.userExtOID=2.5.29.17 Br Florian -----Ursprüngliche Nachricht----- Von: pki-users-bounces(a)redhat.com [mailto:pki-users-bounces@redhat.com] Im Auftrag von Carsten Grzemba Gesendet: Mittwoch, 09. Dezember 2015 08:08 An: Pki-users(a)redhat.com Betreff: [Pki-users] SAN:howt is it possible to sign certificate requests with DNS alias names? [phishing][bayes][heur][html-removed] I try to sign certificate requests with SAN extension to have DNS alias names, but with no success. I see that there are subjectAltNameExt in the profile but my policyset.serverCertSet.9.default.params.subjAltExtPattern_0=$request.req_san_pattern_0$ is always null, although I have input.i3.name=subjectAltNameExtInputImpl for the inputs. What I am doing wrong? _______________________________________________ Pki-users mailing list Pki-users(a)redhat.com https://www.redhat.com/mailman/listinfo/pki-users