Collaborate Disseminate
I am getting this error in my device:
javax.net.ssl.SSLException: hostname in certificate didn’t match: <ec2-5-43-58-857.us-east-2.compute.amazonaws.com> != <na>
So I did some research and found I could set alternative IP addr… Continue reading OpenSSL GENERAL_NAME:bad ip address set in [alt_names]
I’m looking into creating a CA certificate strategy where i work. And i was wondering if anyone had any points of interest to raise around the difference of a model where our .com and key subdomains use the same cert with SAN entries… ve… Continue reading CA cert with many Subject Alternative Name (SAN) entries, versus individual certs in public production?
I am using the following command to create a certificate sign request file.
openssl.exe req -new -key clinetkey.pem -out client.csr" -config client_cacert.cnf
where client_cacert.cnf has the following content
[ req ]
default_bits = 4… Continue reading SAN is getting replaced into CSR with CA’s SAN
While running the following command on Ubuntu 19.10, with OpenSSl 1.1.1c 28 May 2019:
openssl req -config ${CNF_FILE} -key ${PRIVATE_FILE} -new -x509 -days 10950 -sha384 -extensions v3_ca -out ${CERT_FILE}
I receive the following output:
… Continue reading Error Loading extension ‘copy_extensions’ in Openssl
I am trying to setup ssl for grpc but no matter what I try I get a no subject alternative name present. I’ve verified the SANs are in the certificate signing request. The common name and also a SAN are the ip addr. I am trying to connect u… Continue reading getting no subject alternative name present exception when the csr shows that the SANs are present
I have been trying to generate a CSR which includes a san of type OtherName.
the generated CSR does not seem to have the SAN field.
this is the configuration file:
distinguished_name = req_distinguished_name
[req_distinguished_name]
… Continue reading generate CSR with SAN does not seem to work. on centos 8
Currently, I have openssl 1.1.1.g running on a Windows 10 system.
I have to generate a new CSR with a key, but somehow it shows up with an error. I can’t seem to find out why, I think it has to do with windows 10. My IT guy said they no e… Continue reading Problem generation CSR in windows 10 with openssl [closed]
Is there any risk associated with having lots of websites in your SAN list? For instance:
Or is this common among website hosts, and possibly safe?
Continue reading Is there a risk associated with to many entries in your SAN list?
I’m doing certificate-based authentication using windows server 2012. I’ve set up the CA, NDES and now, when I request a certificate using the SCEP Challenge password, I’m able to receive the certificate, but in AD, the certi… Continue reading CA issued certificates maps to the wrong user in AD
I want to generate a self signed certificate for temporary local testing of a web service via HTTPS. I don’t want to install the CA though, because the self signed certificate is generated on the fly with each start of the we… Continue reading Are SAN IP addresses / DNS names useless in self signed certificates by untrusted CAs?