Thanks a lot for the details Kai, much appreciated.
Indeed I was referring to options '-7', '-8' as they are decribed at
https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/tools/NSS_Tools_certutil
I was not aware of '--extSAN' as it seems to be missing from the above
doc. Thanks for pointing it out. I will give it a shot.
Is there any documentation available for '--extSAN' parameter? Mr.
Google did not find any helpful resource.
Thanks again,
Bernhard
Am 7/14/14 8:11 PM, schrieb Kai Engert:
On Mon, 2014-07-14 at 10:47 +0200, Bernhard Thalmayr wrote:
What is the reason, why certutil supports 'dNSName' GeneralNames for
SubjectAltName but not 'iPAddress' (RFC 3270 secion 4.2.1.7)?
Do you refer to the command line parameters -7 and -8 ?
I don't know why this subset was chosen in the past.
However, just recently we added support for additional SAN variations
(in version 3.16.2), which provides the new parameter --extSAN.
Can you try it? If it doesn't work as expected, please let us know.
Kai
--
Painstaking Minds
IT-Consulting Bernhard Thalmayr
Herxheimer Str. 5, 83620 Vagen (Munich area), Germany
Tel: +49 (0)8062 7769174
Mobile: +49 (0)176 55060699
bernhard.thalm...@painstakingminds.com - Solution Architect
http://www.xing.com/profile/Bernhard_Thalmayr
http://de.linkedin.com/in/bernhardthalmayr
This e-mail may contain confidential and/or privileged information.If
you are not the intended recipient (or have received this email in
error) please notify the sender immediately and delete this e-mail. Any
unauthorized copying, disclosure or distribution of the material in this
e-mail is strictly forbidden.
--
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto
