<html><head><meta http-equiv="Content-Type" content="text/html; charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">For OpenSSL 1.0.2:<div class=""><br class=""></div><div class="">Are you asking how to get a DNS Subject Alternative Name extension into the certificate?<div class="">You would need to edit an openssl.cnf file and add the proper stuff to get this extension. Check the man page for x509v3_config.</div><div class="">The item you want to put in the config file is subjectAltName=DNS:<a href="http://myserver.mydom.com" class="">myserver.mydom.com</a></div><div class=""><br class=""></div><div class="">Also see the man page for ca and config</div><div class=""><br class=""></div><div class="">You may need to run the openssl ca command directly instead of using CA.pl so you can use the -extensions argument.<br class=""><div><br class=""><blockquote type="cite" class=""><div class="">On Feb 16, 2021, at 8:22 PM, Kaushal Shriyan <<a href="mailto:kaushalshriyan@gmail.com" class="">kaushalshriyan@gmail.com</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div class=""><br class=""></div><div class=""><br class=""><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Tue, 16 Feb 2021 at 6:02 AM, Kaushal Shriyan <<a href="mailto:kaushalshriyan@gmail.com" class="">kaushalshriyan@gmail.com</a>> wrote:<br class=""></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr" class="">Hi,<br class=""><div class=""><br class=""></div><div class="">I am running CentOS Linux release 7.9.2009 (Core).</div><div class=""><br class=""></div><div class="">#rpm -qa | grep openssl<br class="">openssl-devel-1.0.2k-21.el7_9.x86_64<br class="">openssl-libs-1.0.2k-21.el7_9.x86_64<br class="">openssl-1.0.2k-21.el7_9.x86_64<br class="">openssl-perl-1.0.2k-21.el7_9.x86_64<br class=""></div><div class=""><br class=""></div><div class="">cd /etc/pki/tls/misc</div><div class="">[root@basheerdevops misc]# ll<br class="">total 64<br class="">-rwxr-xr-x. 1 root root 5178 Dec 17 02:53 CA<br class="">-rwxr-xr-x 1 root root 5691 Dec 17 02:53 CA.pl<br class="">-rwxr-xr-x. 1 root root 119 Dec 17 02:53 c_hash<br class="">-rwxr-xr-x. 1 root root 152 Dec 17 02:53 c_info<br class="">-rwxr-xr-x. 1 root root 112 Dec 17 02:53 c_issuer<br class="">-rwxr-xr-x. 1 root root 110 Dec 17 02:53 c_name<br class="">-rw-r--r-- 1 root root 4837 Feb 16 05:51 newcert.pem<br class="">-rw-r--r-- 1 root root 1834 Feb 16 05:49 newkey.pem<br class="">-rw-r--r-- 1 root root 1115 Feb 16 05:49 newreq.pem<br class="">-rwxr-xr-x 1 root root 6419 Dec 17 02:53 target<br class=""></div><div class=""><br class=""></div><div class=""> #./CA.pl -newreq --> is there a way to specify server name? For example gitlabinternal. By default, it saves in file <b class="">newcert.pem</b></div><div class=""> #./CA.pl -sign <br class=""></div><div class=""><br class=""></div><div class="">I ran the below command to copy </div><div class="">#cp newcert.pem gitlabinternal.pem </div><div class="">#openssl x509 -in gitlabinternal.pem -noout -text<br class=""></div><div class=""><br class=""></div><div class="">Is there a way to specify servername in ./CA.pl -newreq command ? Please suggest further. Thanks in advance. </div><div class=""><br class=""></div><div class="">Best Regards,</div><div class=""><br class=""></div><div class="">Kaushal</div><div class=""></div></div></blockquote><div dir="auto" class=""><br class=""></div><div dir="auto" class="">Hi,</div><div dir="auto" class=""><br class=""></div><div dir="auto" class="">I will appreciate if someone can pitch in for my earlier email post to this mailing list. </div><div dir="auto" class=""><br class=""></div><div dir="auto" class="">Thanks in Advance.</div><div dir="auto" class=""><br class=""></div><div dir="auto" class="">Best Regards,</div><div dir="auto" class=""><br class=""></div><div dir="auto" class="">Kaushal</div></div></div>
</div></blockquote></div><br class=""></div></div></body></html>