Ever login to a Debian/Ubuntu system that just says the servername or something similar, but not the number of updates (if any) it needs? Normally when you login …you might see the message like this: Welcome to Ubuntu 12.04.4 LTS (GNU/Linux 3.2.0-58-generic x86_64) * Documentation: https://help.ubuntu.com/ 115 packages can be updated. 115 updates are security … Read more
have you noticed that Certs you create on your Standalone or intermediate CA have a 1 year lifespan even if your CA has a 10 or 20 etc. year cert? Here is how to create certs with longer validity! Do this from the CA at the command prompt. certutil -setreg CA\ValidityPeriod “Years” certutil -setreg CA\ValditiyPeriodUnits … Read more
Original here – Reduce SSL cost and maintenance by using single certificate for multiple websites using SAN certificate SAN stands for “Subject Alternative Names” and this helps you to have a single certificate for multiple CN (Common Name). You might be thinking this is wildcard SSL but let me tell you – it’s slightly different. In … Read more
Copy the default template of openssl.cnf to a writable location. cp /System/Library/OpenSSL/openssl.cnf src Uncomment the req_extensions = v3_req req_extensions = v3_req # The extensions to add to a certificate request Add subjectAltName to v3_req section [ v3_req ] # Extensions to add to a certificate request basicConstraints = CA:FALSE keyUsage = nonRepudiation, digitalSignature, keyEncipherment subjectAltName = @alt_names Add the … Read more