Hi Oliver, thank you for your reply, but I am not sure what I am missing as I am still not getting SAN in my certificate.
I am using openSSL to generate the CSR and I do indeed have the field XmppAddr with the jabberID in the SubjectAltName section in this CSR. However, when I send this CSR, the certificate that I get back does not contain this field. Should I also change some settings so that the field is read and copied from the CSR to the certificate? Thank you very much, Regards. Elsa Da: Oliver Welter <m...@oliwel.de> Inviato: sabato 1 giugno 2024 19:08 A: openxpki-users@lists.sourceforge.net Oggetto: Re: [OpenXPKI-users] EST and subjectAltName Hello Elsa, in case you have this information in the CSR you should be able to access this information in the profile via "otherName" in the same way as you can see this for DNS/IP. In case you do not have this extension in the CSR already you need to grab this from an other source which requires some rework of the workflows. best regards Ol On 29.05.24 12:22, Corniani Elsa (RSE) wrote: Hi, I'm using Authenticated EST to get a TLS client certificate. I would like to use this client certificate to authenticate to an xmpp server, so I need the certificate to contain the field: subjectAltName = otherName:XmppAddr;UTF8:jabberID@domain. Could you please help me with the steps to get such a certificate using EST in OpenXPKI? Thank you very much. Regards, Elsa RSE SpA ha adottato il Modello Organizzativo ai sensi del D.Lgs.231/2001, in forza del quale l'assunzione di obbligazioni da parte della Società avviene con firma di un procuratore, munito di idonei poteri. RSE adopts a Compliance Programme under the Italian Law (D.Lgs.231/2001). According to this RSE Compliance Programme, any commitment of RSE is taken by the signature of one Representative granted by a proper Power of Attorney. Le informazioni contenute in questo messaggio di posta elettronica sono riservate e confidenziali e ne e' vietata la diffusione in qualsiasi modo o forma. Qualora Lei non fosse la persona destinataria del presente messaggio, La invitiamo a non diffonderlo e ad eliminarlo, dandone gentilmente comunicazione al mittente. The information included in this e-mail and any attachments are confidential and may also be privileged. If you are not the correct recipient, you are kindly requested to notify the sender immediately, to cancel it and not to disclose the contents to any other person. _______________________________________________ OpenXPKI-users mailing list OpenXPKI-users@lists.sourceforge.net<mailto:OpenXPKI-users@lists.sourceforge.net> https://lists.sourceforge.net/lists/listinfo/openxpki-users -- Protect your environment - close windows and adopt a penguin! RSE SpA ha adottato il Modello Organizzativo ai sensi del D.Lgs.231/2001, in forza del quale l'assunzione di obbligazioni da parte della Società avviene con firma di un procuratore, munito di idonei poteri. RSE adopts a Compliance Programme under the Italian Law (D.Lgs.231/2001). According to this RSE Compliance Programme, any commitment of RSE is taken by the signature of one Representative granted by a proper Power of Attorney. Le informazioni contenute in questo messaggio di posta elettronica sono riservate e confidenziali e ne e' vietata la diffusione in qualsiasi modo o forma. Qualora Lei non fosse la persona destinataria del presente messaggio, La invitiamo a non diffonderlo e ad eliminarlo, dandone gentilmente comunicazione al mittente. The information included in this e-mail and any attachments are confidential and may also be privileged. If you are not the correct recipient, you are kindly requested to notify the sender immediately, to cancel it and not to disclose the contents to any other person.
_______________________________________________ OpenXPKI-users mailing list OpenXPKI-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openxpki-users
