certsrv icon indicating copy to clipboard operation
certsrv copied to clipboard

certsrv.get_cert with attributes

Open defiant214 opened this issue 7 years ago • 10 comments

Is there a way to add additional attributes to the cert request? For example, I frequently include subject alternate name (SAN) fields using the san:dns=dns.name[&dns=dns.name] format.

defiant214 avatar Jul 25 '18 00:07 defiant214

Hi!

No, this is not possible at the moment, but should be an easy fix.

Out of curiosity; any reason why you just don't include the SAN in the CSR? I believe it's bad practice to allow SANs to be specified in the request attributes.

magnuswatn avatar Jul 25 '18 08:07 magnuswatn

The application that I generate the CSR through does not support adding any SANs.

Do I need to open a feature request?

defiant214 avatar Jul 25 '18 10:07 defiant214

I see.

I fixed this in the v2 branch: https://github.com/magnuswatn/certsrv/commit/0a0622030d64b000292b16a75713f9db9e5f1b97

I'm planning on releasing v2 in a couple of weeks.

magnuswatn avatar Jul 25 '18 16:07 magnuswatn

Cheers! Thank you!

defiant214 avatar Jul 26 '18 08:07 defiant214

Is there an ETA for v2? Would love to integrate this into my workflow but need the attribute capability.

defiant214 avatar Aug 21 '18 19:08 defiant214

Sorry about the wait, I will release v2 in the coming week.

magnuswatn avatar Aug 23 '18 10:08 magnuswatn

I released v2 just now. Sorry it took so long. Hope it works for you!

magnuswatn avatar Aug 28 '18 14:08 magnuswatn

@defiant214 Did this work out for you? :-)

magnuswatn avatar Dec 04 '18 21:12 magnuswatn

I apologize. I haven't had a chance to try it yet! My project has been on hold for a few months, as more important things sidetracked me. :-(

defiant214 avatar Dec 04 '18 21:12 defiant214

No problem, that's life! Just let me know when you get the opportunity to test.

magnuswatn avatar Dec 05 '18 09:12 magnuswatn