Re: OpenSSL with v3 extensions and subjectAltName question

2014-10-29 Thread Stefan H. Holek
I recommend to stay away from openssl.cnf and create your own config files. You may find http://pki-tutorial.readthedocs.org/ useful as it provides plenty of example configs. And no, you cannot prompt for a SAN, but you can use an environment variable which is almost as good. Cheers, Stefan On

OpenSSL with v3 extensions and subjectAltName question

2014-10-28 Thread Mik J
Hello, I've read numerous webpages but I still don't understand many things on how to get it working properly. I'm trying to add a subjectAltName so that my browser won't give me a certificate warning whether I access the web server using the fqdn or an IP address. In many web pages about th