Re: Wildcard: how are they correct?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



I'm Dustin Albright  I see what u r say thing there two listed so that's old man in back and me inn liven room with Lil Lil man 

On Wed, Oct 10, 2018, 2:55 AM Kyle Hamilton <aerowolf@xxxxxxxxx> wrote:
If subjectAltName exists, CN= is not evaluated.  All the given
examples should work.  (The only exceptions are validators that
haven't been current for more than 20 years.)  None of the examples is
correct.  CN= should not even be included in the certificate.  If it
is, (d) is the closest to correct, if "hello world" is replaced by
something meaningful to the identification or naming of the subject.

-Kyle H
On Tue, Oct 9, 2018 at 11:18 PM Walter H. <walter.h@xxxxxxxxxxxxxxxxx> wrote:
>
> Hello,
>
> which of these possibilities is the correct one?
>
> (a)  CN=*.example.com
>      and subjectAltName = DNS:*.example.com, DNS:example.com
>
> (b)  CN=example.com
>      and subjectAltName = DNS:example.com, DNS:*.example.com
>
> (c)  CN=example.com
>      and subjectAltName = DNS:*.example.com, DNS:example.com
>
> (d)  CN=hello world
>      and subjectAltName = DNS:example.com, DNS:*.example.com
>
> Thanks,
> Walter
>
> --
> openssl-users mailing list
> To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users
--
openssl-users mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users
-- 
openssl-users mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Index of Archives]     [Linux ARM Kernel]     [Linux ARM]     [Linux Omap]     [Fedora ARM]     [IETF Annouce]     [Security]     [Bugtraq]     [Linux]     [Linux OMAP]     [Linux MIPS]     [ECOS]     [Asterisk Internet PBX]     [Linux API]

  Powered by Linux