Re: Confusion about subject alternative names - resolved

2010-09-22 Thread Patrick Patterson
= copy From: Gaiseric Vandal [mailto:gaiseric.van...@gmail.com] Sent: Saturday, September 18, 2010 7:09 PM To: openssl-users@openssl.org Subject: RE: Confusion about subject alternative names Some additional info: My openssl.cnf file includes the following

Re: Confusion about subject alternative names - resolved

2010-09-22 Thread Patrick Patterson
From: Gaiseric Vandal [mailto:gaiseric.van...@gmail.com] Sent: Saturday, September 18, 2010 7:09 PM To: openssl-users@openssl.org Subject: RE: Confusion about subject alternative names Some additional info: My openssl.cnf file includes the following

Re: Confusion about subject alternative names - resolved

2010-09-22 Thread Gaiseric Vandal
To: openssl-users@openssl.org Subject: RE: Confusion about subject alternative names Some additional info: My openssl.cnf file includes the following --- - --- policy

Re: Confusion about subject alternative names - resolved

2010-09-22 Thread Patrick Patterson
On 2010-09-22, at 6:38 PM, Gaiseric Vandal wrote: Thanks for the link. I still need the CA to load the SAN parameter from the request- it looks like a lot of the defaults would be to copy the e-mail address into the SAN field. Why? Why not just have the CA just put the appropriate

RE: Confusion about subject alternative names - resolved

2010-09-22 Thread Gaiseric Vandal
-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of Patrick Patterson Sent: Wednesday, September 22, 2010 6:48 PM To: openssl-users@openssl.org Subject: Re: Confusion about subject alternative names - resolved On 2010-09-22, at 6:38 PM, Gaiseric Vandal wrote: Thanks

Re: Confusion about subject alternative names - resolved

2010-09-22 Thread Patrick Patterson
Hi there: See my answer inline: On 2010-09-22, at 8:06 PM, Gaiseric Vandal wrote: I use openssl to create certs for servers only, not for users. If I create a key with openssl, then create a CSR with openssl req, it would prompt me for a subjectAltName.Openssl ca will sign CSR's from

Re: Confusion about subject alternative names - resolved

2010-09-20 Thread Patrick Patterson
From: Gaiseric Vandal [mailto:gaiseric.van...@gmail.com] Sent: Saturday, September 18, 2010 7:09 PM To: openssl-users@openssl.org Subject: RE: Confusion about subject alternative names Some additional info: My openssl.cnf file includes the following

Re: Confusion about subject alternative names - resolved

2010-09-20 Thread Gaiseric Vandal
in openssl.cnf has resolved the problem. copy_extensions = copy From: Gaiseric Vandal [mailto:gaiseric.van...@gmail.com] Sent: Saturday, September 18, 2010 7:09 PM To: openssl-users@openssl.org Subject: RE: Confusion about subject alternative names Some additional info: My openssl.cnf file

RE: Confusion about subject alternative names - resolved

2010-09-19 Thread Gaiseric Vandal
FYI, enabling the following line in openssl.cnf has resolved the problem. copy_extensions = copy From: Gaiseric Vandal [mailto:gaiseric.van...@gmail.com] Sent: Saturday, September 18, 2010 7:09 PM To: openssl-users@openssl.org Subject: RE: Confusion about subject alternative names

Confusion about subject alternative names

2010-09-18 Thread Gaiseric Vandal
Hi I am using various version of openssl-0.9.x (including openssl-0.9.8k-1.fc11.i686 on my linux machine altho the cusotmized openssl.cnf file is probably inherited from a slightly earlier version.) When I create a certificate signing request with openssl, I have an option to specify an Subject

RE: Confusion about subject alternative names

2010-09-18 Thread Gaiseric Vandal
openssl.cnf could optionally automatically copy the e-mail address to subjectAltName. -Thanks From: Gaiseric Vandal [mailto:gaiseric.van...@gmail.com] Sent: Saturday, September 18, 2010 5:08 PM To: openssl-users@openssl.org Subject: Confusion about subject alternative names Hi

Re: Confusion about subject alternative names

2010-09-18 Thread Gaiseric Vandal
)-If you configure outlook 2007 to use exchange1 it will connect to IIS, get the mismatched certificate, and complain.This gets worse if you have multiple Exchange servers. Re: Confusion about subject alternative names Peter Sylvester Thu, 02 Sep 2010 01:53:49 -0700

RE: Confusion about subject alternative names

2010-09-02 Thread Eisenacher, Patrick
Hi Gaiseric, -Original Message- From: Gaiseric Vandal I am using various version of openssl-0.9.x (including openssl-0.9.8k-1.fc11.i686 on my linux machine altho the cusotmized openssl.cnf file is probably inherited from a slightly earlier version.) When I create a certificate

Re: Confusion about subject alternative names

2010-09-02 Thread Peter Sylvester
Since webmail, imap, smtp(s) all operate on different ports, and you have different listeners, the correct way to me seems to use three certificates with the desired hostnames etc. Having the same IP address doesn't matter in this particular case.

Confusion about subject alternative names

2010-09-01 Thread Gaiseric Vandal
Hi I am using various version of openssl-0.9.x (including openssl-0.9.8k-1.fc11.i686 on my linux machine altho the cusotmized openssl.cnf file is probably inherited from a slightly earlier version.) When I create a certificate signing request with openssl, I have an option to specify an