The_Great_Archive/xca
1
0
Fork 0
mirror of https://github.com/chris2511/xca.git synced 2026-09-14 11:06:19 +05:00
Code Issues Actions Packages Projects Releases Wiki Activity

Close #315 Support UPN type for EAP/802.1X certificates

Browse Source 
Replace "UPN:" by "otherName:msUPN;UTF8:" when generating
the extension from the Subject- and IssuerAlternativeName.

Extend the Edit dialog of the SAN and IAN by the "UPN" prefix.

Replace "otherName:msUPN;UTF8:" by "UPN:" when creating a template
from an existing certificate or request.

The OpenSSL config file export, the configuration display
and edit on the "Advanced Tab" are not afffected, since
this is an XCA syntax sugar, not supported by OpenSSL.

Update documentation
This commit is contained in:
Christian Hohnstaedt 2024-09-06 09:27:16 +02:00
parent 73f1029f52
commit 60ca584266
4 changed files with 24 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
doc/rst/certificate-input.rst
View File

@ -147,7 +147,10 @@ Subject Alternative Name
........................
The subject alternative name accepts a special entry *DNS:copycn*.
This will copy the *commonName* entry frome th subject as DNS entry.
This will copy all *commonName* entries from the subject as DNS entries.
Together with the issuer alternative name it accepts the special entry *UPN:*
as short form of *otherName:msUPN;UTF8:*
.. index:: wizard_advanced (wizard_advanced)

9
lib/pki_temp.cpp
View File

@ -192,6 +192,15 @@ void pki_temp::fromExtList(extList *el, int nid, const char *item)
{
QString target;
el->genConf(nid, &target, &adv_ext);
if (nid == NID_subject_alt_name || nid == NID_issuer_alt_name) {
QStringList sl = target.split(",");
for (int i=0; i<sl.size(); i++) {
QString s = sl[i].trimmed();
if (s.startsWith("otherName:msUPN;UTF8:"))
sl[i] = s.replace("otherName:msUPN;UTF8:", "UPN:");
}
target = sl.join(",");
}
settings[item] = target;
}

9
lib/x509v3ext.cpp
View File

@ -83,6 +83,15 @@ x509v3ext &x509v3ext::create(int nid, const QString &et, X509V3_CTX *ctx)
if (new_san.size() > 0)
etext.replace(QString("DNS:copycn"), new_san.join(","));
}
if (nid == NID_subject_alt_name || nid == NID_issuer_alt_name) {
QStringList sl = etext.split(",");
for (int i=0; i<sl.size(); i++) {
QString s = sl[i].trimmed();
if (s.startsWith("UPN:"))
sl[i] = s.replace("UPN:", "otherName:msUPN;UTF8:");
}
etext = sl.join(",");
}
QByteArray ba = etext.toLocal8Bit();
ext = X509V3_EXT_conf_nid(NULL, ctx, nid, ba.data());
}

4
widgets/NewX509.cpp
View File

@ -1125,13 +1125,13 @@ enum NewX509::extension_error NewX509::validateExtensions(QString &result)
void NewX509::on_editSubAlt_clicked()
{
QString s = "URI,email,RID,DNS,IP,otherName";
QString s = "URI,email,RID,DNS,IP,UPN,otherName";
editV3ext(subAltName, s, NID_subject_alt_name);
}
void NewX509::on_editIssAlt_clicked()
{
QString s = "URI,email,RID,DNS,IP,otherName,issuer";
QString s = "URI,email,RID,DNS,IP,UPN,otherName,issuer";
editV3ext(issAltName, s, NID_issuer_alt_name);
}