Hi Paul,

On Mon, Aug 18, 2025 at 03:09:58PM -0400, Paul Kehrer wrote:
> Yes, we expose X.509 extensions and that includes subject alternative name,
> which contains dNSName values.
> https://cryptography.io/en/latest/x509/reference/#cryptography.x509.SubjectAlternativeName

Unless I'm missing something, that provides the SAN values and
cryptography's types.  But I need openssl's names for those types; see
the switch statement at [1].

It's a weird thing to ask, since cryptography uses classes to represent
different SAN types.  This is much nicer than openssl for code.  But I
might need to be input/output compatible with its string prefixes like
"DNS", "IP Address", "email", etc.

Ross

[1] - 
https://github.com/openssl/openssl/blob/c66d9760a77c5a8ec4b8bdb6000b4213384d0e3e/crypto/x509/v3_san.c#L86-L205
_______________________________________________
Cryptography-dev mailing list -- [email protected]
To unsubscribe send an email to [email protected]
https://mail.python.org/mailman3//lists/cryptography-dev.python.org
Member address: [email protected]

Reply via email to