Support Subject Alternative Name in Cerficate generation (CSR)

scop / portecle

User friendly GUI application for creating, managing and examining keystores, keys, certificates, certificate requests, certificate revocation lists and more

http://portecle.sourceforge.net/

GNU General Public License v2.0

145 stars 45 forks source link

Support Subject Alternative Name in Cerficate generation (CSR) #22

Closed scop closed 6 years ago

scop commented 6 years ago

Google Chrome requires a Subject Alternative Name in self signed certificates. Common Name is not used anymore.

See https://www.thesslstore.com/blog/security-changes-in-chrome-58/

Currently there's no field in Portecle to fill in this field when generating a KeyPair ...

Reported by: nicovn

scop commented 6 years ago

status: open --> pending

Original comment by: scop

scop commented 6 years ago

This is now implemented in git. It's not pretty, but it's there :)

Original comment by: scop

picpicpic commented 6 years ago

Hi, In the version 1.11, it's working fine for a single dns alternative name but I can't enter multiple alternative dns which could be pretty useful :)

Thx and regards Aldric

scop commented 6 years ago

Sure, and it would also be useful to have something other than just DNS SAN's there. But that deserves a new issue of its own ;) (This one's implemented as requested.)