On Tue, 22 Jan 2019, Mr. Jan Walter wrote:
Certutil command line:certutil -S -c "ca.zzz.net" -n "vv.zzz.net" -s "O=VV Server Cert,CN=vv.zzz.net" -k rsa -v 12 -d sql:${HOME}/ca -t ",," -1 -6 -8 "vv.zzz.net" --extSAN ip:11.11.11.11,ip:10.0.0.194
The -8 option should set the SubjectAltName per the certutil man page, yes?
I guess so, yes. So I guess go check out the debug logs. Paul _______________________________________________ Swan mailing list [email protected] https://lists.libreswan.org/mailman/listinfo/swan
