Re: Missing gnutls_x509_crq_sest_subject_alternative_name ?

[Nikos Mavrogiannopoulos]

Simon Josefsson wrote:

>>  http://lists.gnu.org/archive/html/help-gnutls/2008-09/msg00013.html
>>
>> The answer seems to be that the capability doesn't exist yet in
>> certtool.  Looking at includes/gnutls/x509.h, i don't see any similar
>> functionality for certificate requests in the library itself
>> either. :(
> 
> I think there are two separate issues here:
> 
> 1) Support for adding more than one SAN to a certificate.

I've just commited a fix for this issue. Now certtool can add multiple
subject alternative names to a certificate.

http://git.savannah.gnu.org/gitweb/?p=gnutls.git;a=commit;h=4ed6efe3f9711b16fda407d90896ab67def7156d

> 2) Support for adding SAN(s) to a certificate requests.

I checked again PKCS #10 and didn't see any obvious way to include
subject alternative names. Thus currently this project is outside my
time restrictions. However if anyone submits a patch for this we'll be
happy to include it.

regards,
Nikos