LinuxQuestions.org - How to add SANs to a self signed SSL cert

- Linux - Security (https://www.linuxquestions.org/questions/linux-security-4/)

- - How to add SANs to a self signed SSL cert (https://www.linuxquestions.org/questions/linux-security-4/how-to-add-sans-to-a-self-signed-ssl-cert-681990/)

How to add SANs to a self signed SSL cert

Until recently I've was using self signed certificates for my internal network. Now to make life easier, I have created my own root and I cut my own certificates from this. They are not trusted in browsers until the CA Root is installed, but that's fine by me.

Now I have a problem. I need a SSL certificate with subject alternative names. I've tried everything I can think of and I've searched the web many times over, but it seems Google is no longer my friend ;) as I have found nothing helpful.

Can anybody give me a push in the right direction please?

Is this what you are after? http://www.linuxhowtos.org/manpages/...9v3_config.htm

Examples:

Code:

  subjectAltName=email:copy,email:my@other.address,URI:http://my.url.here/

  subjectAltName=IP:192.168.7.1

  subjectAltName=IP:13::17

  subjectAltName=email:my@other.address,RID:1.2.3.4

  subjectAltName=otherName:1.2.3.4;UTF8:some other identifier