How can I add alternate subject names when creating a CSR using xca?

U. Windl

8/28/24, 1:53 PM

openSUSE and SLES dropped their old CA management, now recommending to use xca.

While it was easy to add alternate subject names like hostname aliases or IP addresses in the old CA management, I could not find a way how to do it in xca.

So I wonder: Is is possible, and if so, how?

1 + 1

certificate

x509

U. Windl

8/28/24, 9:38 PM

On migration: I think it could have been answered at Super User, too (and it would be "on-topic", right?).

Score:0

Server

mfinni

8/28/24, 6:14 PM

https://hohnstaedt.de/xca-doc/html/certificate-input.html#wizard points you to https://www.openssl.org/docs/manmaster/man5/x509v3_config.html

which gives some examples of the config for specifying SAN values

subjectAltName = email:copy, email:[email protected], URI:http://my.example.com/

subjectAltName = IP:192.168.7.1

subjectAltName = IP:13::17

subjectAltName = email:[email protected], RID:1.2.3.4

subjectAltName = otherName:1.2.3.4;UTF8:some other identifier

[extensions]
subjectAltName = dirName:dir_sect

[dir_sect]
C = UK
O = My Organization
OU = My Unit
CN = My Name

+ 1

U. Windl

8/28/24, 9:43 PM

Well, I have a script working with openssl commands directly. The old YaST CA management would easily allow adding host aliases and lists of IP addresses (among others). `xca`seems to have a nice user interface, but how to add alternate names looks quite like a mystery to me. "*The subject-alternative-name extension must be used to define additional DNS names, even wildcards*" is quite vague.

Elon Musk

I sit in a Tesla and translated this thread with Ai:

EN: How can I add alternate subject names when creating a CSR using xca?

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.