|
On 10/10/2017 05:40 PM, Jorge Novo
wrote:
Hi everyone,
As most of us know, the Google Chrome Navigator ask about
Subject Alternative Name instead the Common Name.
I want to distribute a little openssl.cnf file for
creation the CSR files with my specific values and establish
the Subject Alternative Name = Common Name. I want yo ask
about the CN and assign this value to SAN.
This is my beta openssl.cnf file:
*Sorry for the comments in Spanish
I do not how to set a variable (CN Variable) to assign to
SAN value.
In my limited knowledge, you can't copy the CN name into the SAN in
the configuration.
Obvious yet clumsy workaround is to have a shell script ask for the
FQDN, set a shell variable with the CN value and then recall the ENV
variable from inside openssl.cnf, or you can have the script
dynamically write/edit opessl.cnf with the user-entered value.
--------------------------------
8< -------------------------------- 8<
-----------------------------------
#
# Este fichero genera los CSR de nuestros sistemas con los
paremetros
# acordados.
#
# openssl genrsa -aes256 -out www.rra.lan.key 2048 -config
opensslMiCasa.cnf
#
# Establecemos un directorio de trabajo, el actual para ser
exactos.
dir = .
[ req ]
default_bits = 2048
# Size of keys
default_keyfile = key.pem
# name of generated keys
default_md = sha256
# message digest algorithm
string_mask = nombstr
# permitted characters
distinguished_name = req_distinguished_name
req_extensions = v3_req
[ req_distinguished_name ]
# Variable name Prompt string
#-------------------------
----------------------------------
0.organizationName = Nombre de la Organizacion
organizationalUnitName = Mi Casa
[Desarrollo|Infraestructuras|Laboratorio]
emailAddress = Cuenta de Correo
emailAddress_max = 64
localityName = Localidad
stateOrProvinceName = Comunidad Autónoma
countryName = ISO 3166-1 Codigo de País
countryName_min = 2
countryName_max = 2
commonName = Common Name
# Default values for the above, for consistency and less
typing.
# Variable name Value
#------------------------
------------------------------
0.organizationName_default = Mi Casa
organizationalUnitName_default = Mi Casa Infraestructuras
localityName_default = Madrid
stateOrProvinceName_default = Comunidad de Madrid
countryName_default = ES
[ v3_req ]
basicConstraints = CA:FALSE
subjectKeyIdentifier = hash
subjectAltName =
-------------------------------- >8
-------------------------------- >8
-----------------------------------
|
--
openssl-users mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users
