RE: Please Help: Certificate Validation using subjectAltName extension

2012-05-18 Thread Mr.Rout
Thanks Dave for explanation. One doubt regarding sentence " If a subjectAltName extension of type dNSName is present, that MUST be used as the identity(RFC 2818)" What does this line means ? Does it says if a certificate have different CN in issuer & subject field but SubAltname: x.x.x.x which m

RE: Please Help: Certificate Validation using subjectAltName extension

2011-12-03 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of Mr.Rout > Sent: Saturday, 03 December, 2011 02:56 > My TLS client can validate both CN and SN & i need to test both the > scenario. > > I don't know how to create certificate with "subjectAltName > extension" using openssl commands. > > In th

Please Help: Certificate Validation using subjectAltName extension

2011-12-02 Thread Mr.Rout
Dear All, My TLS client can validate both CN and SN & i need to test both the scenario. I don't know how to create certificate with “subjectAltName extension” using openssl commands. In the RFC-2818 , there are two ways of Certificate Validation for Host name 1) CN (Common Name) 2) S