Quantcast
Channel: Public Key Infrastructure PowerShell module
Viewing all articles
Browse latest Browse all 729

Commented Unassigned: Extract Subject Alternate Names from a Certificate Request [43]

$
0
0
Hello,

Is there a function available in the PSPKI-Module (or PS-Code available) for extracting the SANs of an existing Certificate Request (which exists as Base64-Encoded String available in Memory/in a File)?

When submitting a CSR to the CA for signing there is the possibility to pass additional SANs via an own Parameter of the Submit-CertificateRequest function. But doing this, SANs which are already in the CSR are irgnored.

So it would be fine to extract SANs from the CSR-String and add additional SANs (collected via a GUI) to them and then Submit them to the CA.

Thank you in advance for your answer

Regards Andreas
Comments: Is this possible with java. Using java I have achieved the first two steps, 1) Instantiate X509CertificateRequest class from request file. Currently only PKCS#10 requests are supported. 2) find extension (in the Extensions property) with OID=2.5.29.17. Am getting the SANS extension values as DER Encode String in java, But Am not able to proceed. There is no interface in the name of IX509ExtensionAlternateName / X509ExtensionAlternateName in my bouncy castle jar. Please help me to move forward. If you wish I will send you the sample code. Thanks and Regards, Hari

Viewing all articles
Browse latest Browse all 729

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>