Re: [Ejbca-develop] CMP and subjectAltName

[Michael S. <mi...@st...>]

Tomas Gustavsson wrote:
> 
> Using CMP in RA mode?

Yes.

> In that case altName is taken from the CertTemplate->SubjectAltName 
> extension.

Looking at (badly written) RFC 4211 I'm confused:

I don't see SubjectAltName used or defined therein.

I see CertTemplate::Subject of type Name (I assume Name definition is taken
from PKIX).

Or do you mean RegInfo::utf8Pairs?

Ciao, Michael.

> On 2014-11-11 10:10, Michael Ströder wrote:
>> HI!
>>
>> I'm currently testing CMP with cmpforopenssl.
>>
>> But my EE profiles mandate the use of certain subjectAltName values.
>>
>> I wonder whether EJBCA supports subject name in RegInfo as detailed in
>>
>> http://tools.ietf.org/html/rfc4211#appendix-A.2
>>
>> How is that tied into the EE profile?
>>
>> Ciao, Michael.