until 1.3. Definitely works with 1.4 and 1.5a with either the 1st or 2nd alt name.
Feel free to encrypt something to either [EMAIL PROTECTED] or [EMAIL PROTECTED]
if you want to try it. Both are in the cert I'm using to sign this. You'll need http://www.cren.net/crenca/cren_root/getrepcert.crt.
Wojciech Zabolotny wrote:
Wojciech Zabolotny wrote:
I need to generate the S/MIME certificate with mutiple e-mail addresses. I've successfully created my own test CA, I can successfully generate and use single e-mail certificates with Mozilla or M$ Outlook on both Linux and Windows platforms. What I can't to do is to generate single certificate for multiple mail addresses. AFAIK it could be done using the "subjectAltName" field.
OK. I've managed to generate the proper certificate, using the undocumented option "-7 [EMAIL PROTECTED],[EMAIL PROTECTED]",
which I've found in sources (the cert.sh file in nss sources).
But it resulted in another problem.
My mozilla (1.0 - standard version in Debian GNU/Linux)
does accept the signature only when the sender's address is
the first one on the list in "-7" option.
When encrypting the message everything seems to work OK.
Has it been fixed in the newer releases?
TIA & Regards, Wojtek Zabolotny [EMAIL PROTECTED]
--
-Larry Riffle
Validate digital signature with CREN root certificate available at:
http://www.cren.net/crenca/cren_root/getrepcert.crt
smime.p7s
Description: S/MIME Cryptographic Signature
