1 Reply Latest reply on Nov 11, 2016 3:45 PM by catdaddy

    How to add SAN to a custom OpenSSL certificate for ePO5




      I was hoping to find somebody who knows how to add SAN (subjectalternativename) to the custom certificate for ePO 5.0. KB72477 provides the command to generate CSR using CN but not SAN. If I add -san to it, nothing changes. Output is the same. I expected it to create the SAN field where the domain name can be added.


      openssl req -new -key c:\ssl\keys\mcafee.key -out c:\ssl\keys\mcafee.csr -config "C:\Program Files\McAfee\ePolicy Orchestrator\Apache2\Conf\openssl-san.cnf"


      Does anybody have an idea how to do that and whether it is supported?