On Fri, Jun 09, 2006 at 12:25:52AM +0200, Goetz Babin-Ebell wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> david kine schrieb:
> Hello David,
>
> > One more question: how do I, using the CA.pl script, generate a
> > certificate with a subjectAltName extension of type dNSName? The ones I
> > have already generated do not have this field set.
>
> > I suppose there is an openssl.cnf file setting for this purpose? I
> > notice the line "#subjectAltName=email:copy" in the system's openssl.cnf
>
> subjectAltName=DNS:your.domain.org
For multiple values:
subjectAltName = @alt_names
[ alt_names ]
DNS.1 = host1.example.com
DNS.2 = host2.example.com
DNS.3 = host3.example.com
DNS.4 = host4.example.com
DNS.5 = host5.example.com
DNS.6 = host6.example.com
DNS.7 = host7.example.com
DNS.8 = host8.example.com
DNS.9 = host9.example.com
DNS.10 = host10.example.com
DNS.11 = host11.example.com
DNS.12 = host12.example.com
DNS.13 = host13.example.com
DNS.14 = host14.example.com
DNS.15 = host15.example.com
DNS.16 = host16.example.com
DNS.17 = host17.example.com
DNS.18 = host18.example.com
DNS.19 = host19.example.com
--
Viktor.
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List openssl-users@openssl.org
Automated List Manager [EMAIL PROTECTED]
