ejbca-develop

[Ejbca-develop] CMP and subjectAltName

[Michael S. <mi...@st...>]

HI!

I'm currently testing CMP with cmpforopenssl.

But my EE profiles mandate the use of certain subjectAltName values.

I wonder whether EJBCA supports subject name in RegInfo as detailed in

http://tools.ietf.org/html/rfc4211#appendix-A.2

How is that tied into the EE profile?

Ciao, Michael.

Re: [Ejbca-develop] CMP and subjectAltName

[Tomas G. <to...@pr...>]

Using CMP in RA mode?

In that case altName is taken from the CertTemplate->SubjectAltName 
extension.

Cheers,
Tomas

On 2014-11-11 10:10, Michael Ströder wrote:
> HI!
>
> I'm currently testing CMP with cmpforopenssl.
>
> But my EE profiles mandate the use of certain subjectAltName values.
>
> I wonder whether EJBCA supports subject name in RegInfo as detailed in
>
> http://tools.ietf.org/html/rfc4211#appendix-A.2
>
> How is that tied into the EE profile?
>
> Ciao, Michael.
>
>
>
> ------------------------------------------------------------------------------
> Comprehensive Server Monitoring with Site24x7.
> Monitor 10 servers for $9/Month.
> Get alerted through email, SMS, voice calls or mobile push notifications.
> Take corrective actions from your mobile device.
> http://pubads.g.doubleclick.net/gampad/clk?id=154624111&iu=/4140/ostg.clktrk
>
>
>
> _______________________________________________
> Ejbca-develop mailing list
> Ejb...@li...
> https://lists.sourceforge.net/lists/listinfo/ejbca-develop
>

Re: [Ejbca-develop] CMP and subjectAltName

[Michael S. <mi...@st...>]

Tomas Gustavsson wrote:
> 
> Using CMP in RA mode?

Yes.

> In that case altName is taken from the CertTemplate->SubjectAltName 
> extension.

Looking at (badly written) RFC 4211 I'm confused:

I don't see SubjectAltName used or defined therein.

I see CertTemplate::Subject of type Name (I assume Name definition is taken
from PKIX).

Or do you mean RegInfo::utf8Pairs?

Ciao, Michael.

> On 2014-11-11 10:10, Michael Ströder wrote:
>> HI!
>>
>> I'm currently testing CMP with cmpforopenssl.
>>
>> But my EE profiles mandate the use of certain subjectAltName values.
>>
>> I wonder whether EJBCA supports subject name in RegInfo as detailed in
>>
>> http://tools.ietf.org/html/rfc4211#appendix-A.2
>>
>> How is that tied into the EE profile?
>>
>> Ciao, Michael.

Re: [Ejbca-develop] CMP and subjectAltName

[Tomas G. <to...@pr...>]

Th CertTemplate is basically a certificate (CRMF request message). The 
CertTemplate contains the naming values requested by the client/RA.

/Tomas

On 2014-11-11 10:39, Michael Ströder wrote:
> Tomas Gustavsson wrote:
>>
>> Using CMP in RA mode?
>
> Yes.
>
>> In that case altName is taken from the CertTemplate->SubjectAltName
>> extension.
>
> Looking at (badly written) RFC 4211 I'm confused:
>
> I don't see SubjectAltName used or defined therein.
>
> I see CertTemplate::Subject of type Name (I assume Name definition is taken
> from PKIX).
>
> Or do you mean RegInfo::utf8Pairs?
>
> Ciao, Michael.
>
>> On 2014-11-11 10:10, Michael Ströder wrote:
>>> HI!
>>>
>>> I'm currently testing CMP with cmpforopenssl.
>>>
>>> But my EE profiles mandate the use of certain subjectAltName values.
>>>
>>> I wonder whether EJBCA supports subject name in RegInfo as detailed in
>>>
>>> http://tools.ietf.org/html/rfc4211#appendix-A.2
>>>
>>> How is that tied into the EE profile?
>>>
>>> Ciao, Michael.
>
>
>
> ------------------------------------------------------------------------------
> Comprehensive Server Monitoring with Site24x7.
> Monitor 10 servers for $9/Month.
> Get alerted through email, SMS, voice calls or mobile push notifications.
> Take corrective actions from your mobile device.
> http://pubads.g.doubleclick.net/gampad/clk?id=154624111&iu=/4140/ostg.clktrk
>
>
>
> _______________________________________________
> Ejbca-develop mailing list
> Ejb...@li...
> https://lists.sourceforge.net/lists/listinfo/ejbca-develop
>

Re: [Ejbca-develop] CMP and subjectAltName

[Michael S. <mi...@st...>]

Michael Ströder wrote:
> Tomas Gustavsson wrote:
>> In that case altName is taken from the CertTemplate->SubjectAltName 
>> extension.
> 
> Looking at (badly written) RFC 4211 I'm confused:

Sorry, found CertTemplate::extensions right now...

Ciao, Michael.