Small question re: Certificate creation

Need help with FileZilla Server? Something does not work as expected? In this forum you may find an answer.

Moderator: Project members

Post Reply
Message
Author
User avatar
boco
Contributor
Posts: 24152
Joined: 2006-05-01 03:28
Location: Germany

Small question re: Certificate creation

#1 Post by boco » 2018-11-02 20:10

When creating a new TLS certificate, is there any possibility for specifying subject alternative names (SANs)? If not, would it be possible to add?
### BEGIN SIGNATURE BLOCK ###
No support requests per PM! You will NOT get any reply!!!
FTP connection problems? Do yourself a favor and read Network Configuration.
All FileZilla products fully support IPv6. http://worldipv6launch.org
### END SIGNATURE BLOCK ###

User avatar
botg
Site Admin
Posts: 31574
Joined: 2004-02-23 20:49
First name: Tim
Last name: Kosse
Contact:

Re: Small question re: Certificate creation

#2 Post by botg » 2018-11-03 09:33

I tried and failed, it's incredibly complicated using OpenSSL. Future versions of FileZilla Server will use GnuTLS.

User avatar
boco
Contributor
Posts: 24152
Joined: 2006-05-01 03:28
Location: Germany

Re: Small question re: Certificate creation

#3 Post by boco » 2018-11-03 17:33

Thanks, I tried with OpenSSL, too. I think I got it to work. Required a few steps (modifying the OpenSSL config file, using the right parameters).

Some of OpenSSL's configuration is beyond sanity, for normal users.
### BEGIN SIGNATURE BLOCK ###
No support requests per PM! You will NOT get any reply!!!
FTP connection problems? Do yourself a favor and read Network Configuration.
All FileZilla products fully support IPv6. http://worldipv6launch.org
### END SIGNATURE BLOCK ###

User avatar
botg
Site Admin
Posts: 31574
Joined: 2004-02-23 20:49
First name: Tim
Last name: Kosse
Contact:

Re: Small question re: Certificate creation

#4 Post by botg » 2018-11-04 13:41

If you think the configuration for the user tool is insane, don't look at the developer API.

Post Reply