Implement and/or Verify Subject Alternate Name functionality

[bbockelm]

Subject alternate names allow a single certificate to be valid for several service names. This is very useful if a single service has several load-balanced hosts (see rfc2459 section 4.2.1.7 on subjectAltName).

We should whether verify a JGlobus-based server and client can properly handle subjectAltName extensions. If not, fix any limitations found.

[mjoldos]

An experience document concerning this issue can be found at http://www.egcf.eu/site/wp-content/uploads/2012/11/SAN-Experiments.doc.
The document describes my approach to this matter. I am currently working on implementing a solution to this issue.
March 27, 2013 [email protected]

[bbockelm]

Hi,

Can you repost it as a PDF?

Thanks,

Brian

[mjoldos]

Repost the comment or the document?

On 27-Mar-13 15:04, Brian Bockelman wrote:

Hi,

Can you repost it as a PDF?

Thanks,

Brian

—
Reply to this email directly or view it on GitHub
#26 (comment).

Marius Joldos
Computer Science Dept.
Technical University of Cluj-Napoca
G. Baritiu 28, sala 10
Dorobantilor 71-73, sala D3
+40-264-202370, 401276
http://users.utcluj.ro/~jim

[bbockelm]

Ah - the document please. I had issues opening it.

[mjoldos]

The pdf is at http://www.egcf.eu/site/wp-content/uploads/2012/11/SAN-Experiments.pdf

[bbockelm]

Alright - so it appears SAN definitely is not implemented. Would you have time to contribute a unit test and/or implementation?

[mjoldos]

On 04/01/2013 04:28 PM, Brian Bockelman wrote:

Alright - so it appears SAN definitely is not implemented. Would you
have time to contribute a unit test and/or implementation?

—
Reply to this email directly or view it on GitHub
#26 (comment).

I made some changes against jglobus 1.8. I sent info to Oscar Keroo at
NIKHEF. Are you in touch with him?

Marius Joldos
Computer Science Dept.
Technical University of Cluj-Napoca
G. Baritiu 28, sala 10
Dorobantilor 71-73, sala D3
+40-264-202370, 401276
http://users.utcluj.ro/~jim