Forum Discussion

Raghu_Nair_7463's avatar
Icon for Nimbostratus rankNimbostratus
Jan 13, 2012

How to generate SAN certifiate using iControl API ?

csr generenation API doesnt support multiple SANs .



The work around is : Use openssl too to generate keys and CSR.



Suppose we want to re-use the existing key which is in FIPs or password mode.



Do anyone have idea how to retrieve this key and use in openssl as parameter ?







1 Reply

  • Hi Raghu,



    I think openssl should be able to access keys stored in FIPS. Can you try testing this on a FIPS unit?



    If that doesn't work, I guess you'd need to generate a new key and import it to the FIPS card afterwards.