Results 1 to 4 of 4

Thread: YAST CA Management

  1. #1

    Default YAST CA Management

    Hi,

    I have problem creating server certificate with SubjectAltNames (DNS) begining with "*"
    ( as opensuse has on their website - CN *.opensuse.org, AltName *.opensuse.org )

    Is there some workaround ?

    Thanks

  2. #2
    Join Date
    Jun 2008
    Location
    San Diego, Ca, USA
    Posts
    11,273
    Blog Entries
    2

    Default Re: YAST CA Management

    I've only ever used openssl to create certificates, and wildcard certificates without a problem.

    But,
    It depends on your use case.
    For self-signed certificates, you can use openssl.
    But, often you should submit a request to a CA instead.

    TSU
    Beginner Wiki Quickstart - https://en.opensuse.org/User:Tsu2/Quickstart_Wiki
    Solved a problem recently? Create a wiki page for future personal reference!
    Learn something new?
    Attended a computing event?
    Post and Share!

  3. #3

    Default Re: YAST CA Management

    Quote Originally Posted by tsu2 View Post
    I've only ever used openssl to create certificates, and wildcard certificates without a problem.
    Thanks for answer.

    You are true. I also found CA Management has not ability use sha256 an other problems. But I'm not so familiar around openssl, I prefer click click click .. and certificate authority has ready, click, click, one server has certificate ( i'm sure with self-signed CA ) and so on. Weak of Yast CA lead me to learn something about openssl.

    I already create certificate with utf8 ( Podbořany instead Podborany and others ) and sha256. But I'm not sure about Basic Constraints:, X509v3 Key Usage: ... etc .. openssl crashes when I'm trying implement these to config file
    I use
    Code:
    openssl req -new -sha256 -nodes  -utf8 -nameopt multiline,utf8 -out jednota.csr -newkey rsa:2048 -keyout jednota.key -config server_request.cfg

  4. #4
    Join Date
    Jun 2008
    Location
    San Diego, Ca, USA
    Posts
    11,273
    Blog Entries
    2

    Default Re: YAST CA Management

    For what reason are you creating (or requesting) a certificate... ie what application or use?

    TSU
    Beginner Wiki Quickstart - https://en.opensuse.org/User:Tsu2/Quickstart_Wiki
    Solved a problem recently? Create a wiki page for future personal reference!
    Learn something new?
    Attended a computing event?
    Post and Share!

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •