Oliver, Ok, I got it. Thank you!
Jeremie Internal -----Message d'origine----- De : Oliver Welter <[email protected]> Envoyé : mercredi 10 août 2022 21:35 À : [email protected] Objet : Re: [OpenXPKI-users] Modify SAN when performing a renewal [Vous ne recevez pas souvent de courriers de [email protected]. Découvrez pourquoi ceci est important à https://aka.ms/LearnAboutSenderIdentification ] [External email: Use caution with links and attachments] ________________________________ Hi Jeremie, the idea on renewal is to get the exact same certificate with a new key so you can skip approvals which would not be the case if you change the SANs. It is of course possible to change this behaviour by editing the workflow, the "prepare_renewal" activity in the enrollment workflow is the place where the old information overwrites the incoming request - so if you remove this, it should be possible but as said, this might undermine all your approval mechanisms and issue certificates without the expected validatiions. Oliver Am 10.08.22 um 17:20 schrieb Jérémie HUNEL via OpenXPKI-users: > Hi there, > > I'd like to change the SAN (and other x509v3 extension fields, as the > key usage) in my certificate when performing a renewal. Is there any > option on OpenXPKI to do that? For now, I get the same SAN in the > renewed certificate although my CSR contains the new data. any clues > on that topic? > > Thanks for help, > > Jeremie. > > > Internal > > > > _______________________________________________ > OpenXPKI-users mailing list > [email protected] > https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Flist > s.sourceforge.net%2Flists%2Flistinfo%2Fopenxpki-users&data=05%7C01 > %7Cjeremie.hunel%40non.se.com%7C5ea62235536041c367e008da7b0782d3%7C6e5 > 1e1adc54b4b39b5980ffe9ae68fef%7C0%7C0%7C637957569433719210%7CUnknown%7 > CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXV > CI6Mn0%3D%7C3000%7C%7C%7C&sdata=S4t%2F13dGHcdmLKH2jxKsb%2FGktWdp%2 > BI8%2F9lKZlL3zrVI%3D&reserved=0 -- Protect your environment - close windows and adopt a penguin! _______________________________________________ OpenXPKI-users mailing list [email protected] https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.sourceforge.net%2Flists%2Flistinfo%2Fopenxpki-users&data=05%7C01%7Cjeremie.hunel%40non.se.com%7C5ea62235536041c367e008da7b0782d3%7C6e51e1adc54b4b39b5980ffe9ae68fef%7C0%7C0%7C637957569433875447%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=KZCASDMgpKlNRB3xnx5HLjp7ZVl4zVfEKBuVafvN3dY%3D&reserved=0 _______________________________________________ OpenXPKI-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/openxpki-users
