Robert Moskowitz wrote:
> I am getting a SAN in the csr e.g.:
> 
>         Attributes:
>         Requested Extensions:
>             X509v3 Subject Alternative Name:
>                 IP Address:192.168.2.1
> [..]
> But I am not getting SAN in the cert.  Perhaps I need something for SAN in the
> -extensions section?  Right now I only have:

Are you using "openssl ca" for signing the cert?

If yes, you could add the line

copy_extensions = copy

to your CA config section.

http://cmrg.fifthhorseman.net/wiki/SubjectAltName

https://wiki.openssl.org/index.php/Manual:Ca%281%29#CONFIGURATION_FILE_OPTIONS

Ciao, Michael.

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

-- 
openssl-users mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users

Reply via email to