How to add SANs to a self signed SSL cert

pirhana · 11-08-2008, 11:30 AM

Until recently I've was using self signed certificates for my internal network. Now to make life easier, I have created my own root and I cut my own certificates from this. They are not trusted in browsers until the CA Root is installed, but that's fine by me.

Now I have a problem. I need a SSL certificate with subject alternative names. I've tried everything I can think of and I've searched the web many times over, but it seems Google is no longer my friend

as I have found nothing helpful.

Can anybody give me a push in the right direction please?

rayfordj · 11-08-2008, 08:27 PM

Is this what you are after? http://www.linuxhowtos.org/manpages/...9v3_config.htm

Examples:

Code:

   subjectAltName=email:copy,email:my@other.address,URI:http://my.url.here/
   subjectAltName=IP:192.168.7.1
   subjectAltName=IP:13::17
   subjectAltName=email:my@other.address,RID:1.2.3.4
   subjectAltName=otherName:1.2.3.4;UTF8:some other identifier