mirror of
https://github.com/Mbed-TLS/mbedtls.git
synced 2025-03-30 07:20:59 +00:00
b2dc3fa72e
Add support of parsing of subject alternative name, of type otherName. Currently supports only hardware module name, as defined in rfc 4108.
48 lines
890 B
Plaintext
48 lines
890 B
Plaintext
[req]
|
|
x509_extensions = v3_ca
|
|
distinguished_name = req_dn
|
|
|
|
[req_dn]
|
|
countryName = NL
|
|
organizationalUnitName = PolarSSL
|
|
commonName = PolarSSL Test CA
|
|
|
|
[v3_ca]
|
|
subjectKeyIdentifier=hash
|
|
authorityKeyIdentifier=keyid:always,issuer:always
|
|
basicConstraints = CA:true
|
|
|
|
[othername_san]
|
|
subjectAltName=otherName:1.3.6.1.5.5.7.8.4;SEQ:hw_module_name
|
|
|
|
[unsupoported_othername_san]
|
|
subjectAltName=otherName:1.2.3.4;UTF8:some other identifier
|
|
|
|
[alt_names]
|
|
DNS.1=example.com
|
|
otherName.1=1.3.6.1.5.5.7.8.4;SEQ:hw_module_name
|
|
DNS.2=example.net
|
|
DNS.3=*.example.org
|
|
|
|
[multiple_san]
|
|
subjectAltName=@alt_names
|
|
|
|
[hw_module_name]
|
|
hwtype = OID:1.3.6.1.4.1.17.3
|
|
hwserial = OCT:123456
|
|
|
|
[noext_ca]
|
|
basicConstraints = CA:true
|
|
|
|
[test_ca]
|
|
database = /dev/null
|
|
|
|
[crl_ext_idp]
|
|
issuingDistributionPoint=critical, @idpdata
|
|
|
|
[crl_ext_idp_nc]
|
|
issuingDistributionPoint=@idpdata
|
|
|
|
[idpdata]
|
|
fullname=URI:http://pki.example.com/
|