Questions tagged [subject-alternative-names]

Filter by
Sorted by
Tagged with
0
votes
0answers
58 views

Using NJS scripting in NGINX to convert $ssl_client_escaped_cert into X509 certificate

How can I use NJS modules in NGINX to convert ssl_client_escaped_cert variable into an actual X509 certificate? I am trying to read Subject alternative name from the user certificate. Which is not ...
0
votes
1answer
88 views

kubernetes apiserver systemd service is not activated

I am seeing below error message when kube-apiserver systemd server is started. cannot validate certificate for 192.168.101.101 because it doesn't contain any IP SANs". Reconnecting... Following are ...
2
votes
2answers
987 views

Why would Chrome ignore the X509v3 Subject Alternative Name in my cert?

I have a cert that include an X509v3 Subject Alternative setting, but Chrome 67.0.3396.99 is saying the Subject Alternative Name is missing even though it looks like it's included in the cert. Here's ...
3
votes
0answers
9k views

x509 certificate not valid for any names when added IP address to openssl.cnf

A self-signed certificate works well while the command used to generate it on a ubuntu machine is: openssl req -x509 -newkey rsa:4096 -keyout private.key -out cert.crt -days 365 -nodes If the ...
0
votes
2answers
1k views

Better understanding TLS/SSL Alternative Names?

Can someone explain (to a 5 year old) how Alternative Names are used? And why some domains have SO many? Are all of these domains sharing a certificate? Are there any security risks (MitM attacks?) ...
1
vote
1answer
511 views

Block Subject Alternative Names in ADCS

I am managing a Windows 2008 ADCS CA and have been aware of the security risks in issuing certificates with SANs. So I tested issuing a PKCS10 file with SANs in the request and it issued the ...
1
vote
0answers
646 views

How to provide a subjectAltName when generating a Certificate Request in IIS?

It seems the latest versions of Chrome, Firefox and Vivaldi no longer work with our Domain Certificates generated by Active Directory Certificate Services because they lack a subjectAltName. My ...
0
votes
1answer
2k views

Adding a Subject Alternative Name to an exchange certificate

We're running an Exchange 2010 environment with multiple SMTP domains which we have configured autodiscover for as well. Now we have discovered that some of the autodiscover addresses hass not been ...
26
votes
4answers
27k views

What is the difference between SAN and SNI SSL certificates?

Could someone explain me the difference between these certificates in a simplified way? I read some articles but it sounds like they do the same job, namely encrypting many domains with one ...
1
vote
4answers
4k views

Let's Encrypt: use Subject Alternative Name for internal domain

My Synology NAS is capable of running the web interface via HTTPS. By default, you access the NAS via its name (say, mynas) so http(s)://myname:5001 or http(s)://myname.local. It defaults to an SSL ...
1
vote
2answers
183 views

OpenSSL config expansion

I created own Certificate Authority and server (virtualhost) certificate based on this specification: https://jamielinux.com/docs/openssl-certificate-authority/index.html It's successfully created, ...
1
vote
1answer
807 views

Certificate SAN support regexp stemming?

Searched on this, but can't find any clear answer - can a certificate SAN contain a name like "citrix*.domain.com", to permit use with citrixdirector.domain.com and citrixprod.domain.com, for example?
6
votes
1answer
29k views

OpenSSL - Add Subject Alternate Name (SAN) when signing with CA

How can I add a Subject Alternate Name when signing a certificate request using OpenSSL (in Windows if that matters)? I've generated a basic certificate signing request (CSR) from the IIS interface. ...
0
votes
1answer
118 views

Subject not considered in a certificate with SAN

I have here a certificate with the subject "server01.department.company.com" and two subject alternative names "app1" and "app2". When I connect with app1 or app2 to the server all is fine. But when I ...
10
votes
3answers
31k views

Adding Subject Alternate Names (SAN) to an existing Cert Signing Request (CSR)

Can any one tell me how I an add a number of Subject Alternate Names to an existing CSR? I'm not talking about generating a CSR with SANs or adding SANs at signing time - I know how to do both of ...