IBM Security Verify

 View Only
  • 1.  WebSeal certificate request with SAN

    Posted Thu December 29, 2022 04:26 AM
    Hi,

    Is it possible to create a certificate request for ISVA reverse proxy instance through SSL management of ISVA LMI, with request containing SAN details (subject alternative name)?

    ------------------------------
    Mita Mitic
    ------------------------------


  • 2.  RE: WebSeal certificate request with SAN
    Best Answer

    Posted Fri December 30, 2022 03:06 AM
    I don't believe so. Use openssl external to ISVA to do that.

    ------------------------------
    Shane Weeden
    IBM
    ------------------------------



  • 3.  RE: WebSeal certificate request with SAN

    Posted Fri December 30, 2022 04:41 AM
    OK, thanks. Just checking if there is anything I couldn't find.

    Mita

    ------------------------------
    Mita Mitic
    ------------------------------



  • 4.  RE: WebSeal certificate request with SAN

    IBM Champion
    Posted Tue January 03, 2023 12:10 PM
    I asked for this a couple years ago in an RFE but the dev team turned the idea down.  We've since just automated things externally from the LMI and use the REST API to push the certs into the keystore after we have the signed cert.  We used openssl with config files (-config option) to make it easier, as we can source control these config files for each domain.

    ------------------------------
    Matt Jenkins
    ------------------------------