alexanderzeitler.com - Fixing Chrome 58+ [missing_subjectAltName] with openssl when using self signed certificates









Search Preview

Fixing Chrome 58+ [missing_subjectAltName] with openssl when using self signed certificates | Alexander Zeitler

alexanderzeitler.com

.com > alexanderzeitler.com

SEO audit: Content analysis

Language Error! No language localisation is found.
Title Fixing Chrome 58+ [missing_subjectAltName] with openssl when using self signed certificates | Alexander Zeitler
Text / HTML ratio 59 %
Frame Excellent! The website does not use iFrame solutions.
Flash Excellent! The website does not have any flash contents.
Keywords cloud openssl = create X509v3 Subject signed CN Key sha256 file certificate SAN C=US cert localhost x509 req Algorithm Signature L=Rochester
Keywords consistency
Keyword Content Title Description Headings
openssl 9
= 8
create 8
X509v3 6
Subject 5
signed 5
Headings
H1 H2 H3 H4 H5 H6
1 0 0 0 0 0
Images We found 2 images on this web page.

SEO Keywords (Single)

Keyword Occurrence Density
openssl 9 0.45 %
= 8 0.40 %
create 8 0.40 %
X509v3 6 0.30 %
Subject 5 0.25 %
signed 5 0.25 %
CN 5 0.25 %
Key 5 0.25 %
sha256 4 0.20 %
file 4 0.20 %
certificate 4 0.20 %
SAN 4 0.20 %
C=US 3 0.15 %
cert 3 0.15 %
localhost 3 0.15 %
x509 3 0.15 %
req 3 0.15 %
Algorithm 3 0.15 %
Signature 3 0.15 %
L=Rochester 3 0.15 %

SEO Keywords (Two Word)

Keyword Occurrence Density
to create 5 0.25 %
self signed 5 0.25 %
create a 4 0.20 %
C=US ST=New 3 0.15 %
ST=New York 3 0.15 %
L=Rochester O=End 3 0.15 %
O=End Point 3 0.15 %
create the 3 0.15 %
Alternative Name 3 0.15 %
Subject Alternative 3 0.15 %
York L=Rochester 3 0.15 %
using self 2 0.10 %
order to 2 0.10 %
Version 3 2 0.10 %
instead of 2 0.10 %
3 0x2 2 0.10 %
Point OU=Testing 2 0.10 %
X509v3 Subject 2 0.10 %
openssl req 2 0.10 %
Chrome 58 2 0.10 %

SEO Keywords (Three Word)

Keyword Occurrence Density Possible Spam
C=US ST=New York 3 0.15 % No
L=Rochester O=End Point 3 0.15 % No
York L=Rochester O=End 3 0.15 % No
Subject Alternative Name 3 0.15 % No
ST=New York L=Rochester 3 0.15 % No
order to create 2 0.10 % No
X509v3 Subject Alternative 2 0.10 % No
O=End Point OU=Testing 2 0.10 % No
Signature Algorithm sha256WithRSAEncryption 2 0.10 % No
self signed certificates 2 0.10 % No
using self signed 2 0.10 % No
to create a 2 0.10 % No
to create the 2 0.10 % No
self signed certificate 2 0.10 % No
the self signed 2 0.10 % No
Version 3 0x2 2 0.10 % No
to contain the 1 0.05 % No
calling openssl x509 1 0.05 % No
openssl x509 text 1 0.05 % No
by calling openssl 1 0.05 % No

SEO Keywords (Four Word)

Keyword Occurrence Density Possible Spam
ST=New York L=Rochester O=End 3 0.15 % No
York L=Rochester O=End Point 3 0.15 % No
C=US ST=New York L=Rochester 3 0.15 % No
X509v3 Subject Alternative Name 2 0.10 % No
L=Rochester O=End Point OU=Testing 2 0.10 % No
using self signed certificates 2 0.10 % No
the SAN by calling 1 0.05 % No
SAN by calling openssl 1 0.05 % No
by calling openssl x509 1 0.05 % No
Toggle navigation Home Feed 1 0.05 % No
to contain the SAN 1 0.05 % No
calling openssl x509 text 1 0.05 % No
openssl x509 text in 1 0.05 % No
x509 text in servercrt 1 0.05 % No
text in servercrt noout 1 0.05 % No
in servercrt noout This 1 0.05 % No
contain the SAN by 1 0.05 % No
also verify your certificate 1 0.05 % No
certificate to contain the 1 0.05 % No
your certificate to contain 1 0.05 % No

Internal links in - alexanderzeitler.com

Fixing Chrome 58+ [missing_subjectAltName] with openssl when using self signed certificates
Fixing Chrome 58+ [missing_subjectAltName] with openssl when using self signed certificates | Alexander Zeitler
Accessing an HTTP API running on your MacBook in a Docker container from your iPhone/iPad using dnsmasq
Accessing an HTTP API running on your MacBook in a Docker container from your iPhone/iPad using dnsmasq | Alexander Zeitler
Deploying Ubuntu Mate Desktop as a developer environment in a Azure VM
Deploying Ubuntu Mate Desktop as a developer environment in a Azure VM | Alexander Zeitler
Deploying Ubuntu Mate Desktop as a developer environment in AWS EC2
Deploying Ubuntu Mate Desktop as a developer environment in AWS EC2 | Alexander Zeitler
Debugging mocha tests in a Docker container using Visual Studio Code
Debugging mocha tests in a Docker container using Visual Studio Code | Alexander Zeitler
Debugging mocha tests with Visual Studio Code when Node.js is installed using nvm
Debugging mocha tests with Visual Studio Code when Node.js is installed using nvm | Alexander Zeitler
Debugging a ES6 Node.js application in a Docker container using Visual Studio Code
Debugging a ES6 Node.js application in a Docker container using Visual Studio Code | Alexander Zeitler
Some thoughts on Open Source Software
Some thoughts on Open Source Software | Alexander Zeitler
Resizing a VMware Workstation VM partition using GParted - get the swap partition out of my way!
Resizing a VMware Workstation VM partition using GParted - get the swap partition out of my way! | Alexander Zeitler
Workflows: using Docker Machine and Docker Compose together in development
Workflows: using Docker Machine and Docker Compose together in development | Alexander Zeitler
Chrome crashes on Ubuntu in VMware Workstation
Chrome crashes on Ubuntu in VMware Workstation | Alexander Zeitler
Rename Visual Studio project including files, folders and namespaces
Rename Visual Studio project including files, folders and namespaces | Alexander Zeitler
A lap around AWS and docker-machine
A lap around AWS and docker-machine | Alexander Zeitler
Integration-testing ASP.NET 5 / MVC 6 Controllers on DNX Beta 4
Integration-testing ASP.NET 5 / MVC 6 Controllers on DNX Beta 4 | Alexander Zeitler
Deploying a ASP.NET MVC 6 API as Azure API App in Azure App Services
Deploying a ASP.NET MVC 6 API as Azure API App in Azure App Services | Alexander Zeitler
lowerCamelCase JSON with ASP.NET MVC 6
lowerCamelCase JSON with ASP.NET MVC 6 | Alexander Zeitler
Running ASP.NET 5 Beta 4 in Docker with DNX runtime #aspnet5 #docker
Running ASP.NET 5 Beta 4 in Docker with DNX runtime #aspnet5 #docker | Alexander Zeitler
Stop complaining or improve yourself
Stop complaining or improve yourself | Alexander Zeitler
#NodeJS / #ExpressJS: Adding routes dynamically at runtime
#NodeJS / #ExpressJS: Adding routes dynamically at runtime | Alexander Zeitler
mongoose: Referencing schema in properties or arrays
mongoose: Referencing schema in properties or arrays | Alexander Zeitler
MongoDB development environment journal size management using mongoctl
MongoDB development environment journal size management using mongoctl | Alexander Zeitler
Farewell...
Farewell... | Alexander Zeitler
Inspecting AngularJS $scope using Firebug and Chrome Developer Tools
Inspecting AngularJS $scope using Firebug and Chrome Developer Tools | Alexander Zeitler
Useful @Brackets extensions for Web Developers
Useful @Brackets extensions for Web Developers | Alexander Zeitler
.NET User Group Karlsruhe: StreamInsight: Complex Event Processing by Microsoft
.NET User Group Karlsruhe: StreamInsight: Complex Event Processing by Microsoft | Alexander Zeitler
“Commit all must be called when a managed buffer has focus” in Microsoft SQL Server Data Tools
“Commit all must be called when a managed buffer has focus” in Microsoft SQL Server Data Tools | Alexander Zeitler
.NET User Group Karlsruhe: Git
.NET User Group Karlsruhe: Git | Alexander Zeitler
Open Source Windows 8 App: Sprudelsuche
Open Source Windows 8 App: Sprudelsuche | Alexander Zeitler
Open Source– Scheissegal?
Open Source– Scheissegal? | Alexander Zeitler
Lowercase JSON with ASP.NET Web API
Lowercase JSON with ASP.NET Web API | Alexander Zeitler
.NET Usergroup Karlsruhe: Think Big – Entwicklung skalierbarer Anwendungen mit Windows Azure
.NET Usergroup Karlsruhe: Think Big – Entwicklung skalierbarer Anwendungen mit Windows Azure | Alexander Zeitler
ASP.NET Web API and RavenDb
ASP.NET Web API and RavenDb | Alexander Zeitler
ASP.NET Web API Round-Up Slides
ASP.NET Web API Round-Up Slides | Alexander Zeitler
ASP.NET MVC 4 public beta including ASP.NET Web API
ASP.NET MVC 4 public beta including ASP.NET Web API | Alexander Zeitler
Hash Bang Urls in Single Page Applications mit ASP.NET MVC
Hash Bang Urls in Single Page Applications mit ASP.NET MVC | Alexander Zeitler
.NET User Group Karlsruhe: Know your Tools
.NET User Group Karlsruhe: Know your Tools | Alexander Zeitler
Git flow init liefert: flags: FATAL unable to determine getopt version unter Cygwin
Git flow init liefert: flags: FATAL unable to determine getopt version unter Cygwin | Alexander Zeitler
Using JsonValue and JsonArray in WCF Web API
Using JsonValue and JsonArray in WCF Web API | Alexander Zeitler
.NET User Group Karlsruhe: PowerShell 3.. 2.. 1..
.NET User Group Karlsruhe: PowerShell 3.. 2.. 1.. | Alexander Zeitler
What’s new in WCF Web API Preview 5 – introducing the test client
What’s new in WCF Web API Preview 5 – introducing the test client | Alexander Zeitler
Externe Templates in KnockoutJS laden
Externe Templates in KnockoutJS laden | Alexander Zeitler
WCF Web API: Role based access control with basic authentication
WCF Web API: Role based access control with basic authentication | Alexander Zeitler
.NET User Group Karlsruhe: Produce Cleaner Code with Aspect-Oriented Programming (AOP)
.NET User Group Karlsruhe: Produce Cleaner Code with Aspect-Oriented Programming (AOP) | Alexander Zeitler
REST using the WCF Web API – POST it!
REST using the WCF Web API – POST it! | Alexander Zeitler
REST using the WCF Web API – getting more RESTful responses (Part 5)
REST using the WCF Web API – getting more RESTful responses (Part 5) | Alexander Zeitler
TypeLoadException when mocking COM objects - Could not load type … from assembly. The type is marked…
TypeLoadException when mocking COM objects - Could not load type … from assembly. The type is marked… | Alexander Zeitler
REST using the WCF Web API – getting RESTful the BDD way (Part 4)
REST using the WCF Web API – getting RESTful the BDD way (Part 4) | Alexander Zeitler
REST using the WCF Web API – refactoring to IoC style (Part 3)
REST using the WCF Web API – refactoring to IoC style (Part 3) | Alexander Zeitler
REST using the WCF Web API – Basics (Part2)
REST using the WCF Web API – Basics (Part2) | Alexander Zeitler
Microsoft Web API – the REST is done by WCF (Part 1)
Microsoft Web API – the REST is done by WCF (Part 1) | Alexander Zeitler
Microsoft Web API – den REST macht WCF (Teil 1)
Microsoft Web API – den REST macht WCF (Teil 1) | Alexander Zeitler
.NET User Group Karlsruhe: Flexible Softwarearchitekturen mit Inversion of Control (IoC)
.NET User Group Karlsruhe: Flexible Softwarearchitekturen mit Inversion of Control (IoC) | Alexander Zeitler
machine.fakes ReSharper Templates
machine.fakes ReSharper Templates | Alexander Zeitler
CreateCert.cmd aus dem Windows Azure Platform Training Kit funktioniert nicht
CreateCert.cmd aus dem Windows Azure Platform Training Kit funktioniert nicht | Alexander Zeitler
JSON via jQuery direkt an einen ASP.NET MVC 3 Controller senden
JSON via jQuery direkt an einen ASP.NET MVC 3 Controller senden | Alexander Zeitler
POSTing Json data using the HttpClient from WCF Web API
POSTing Json data using the HttpClient from WCF Web API | Alexander Zeitler
Using the new WCF Web APIs HttpClient with ASP.NET Forms Authentication
Using the new WCF Web APIs HttpClient with ASP.NET Forms Authentication | Alexander Zeitler
Keyboard Jedi unter x64
Keyboard Jedi unter x64 | Alexander Zeitler
Using WCF Web APIs / WCF Http with ASP.NET Forms Authentication
Using WCF Web APIs / WCF Http with ASP.NET Forms Authentication | Alexander Zeitler
WCF Web APIs / WCF Http mit ASP.NET Forms Authentication verwenden
WCF Web APIs / WCF Http mit ASP.NET Forms Authentication verwenden | Alexander Zeitler
ILSpy – Open Source .NET Assembly Browser und Decompiler
ILSpy – Open Source .NET Assembly Browser und Decompiler | Alexander Zeitler

Alexanderzeitler.com Spined HTML


Fixing Chrome 58+ [missing_subjectAltName] with openssl when using self signed certificates | Alexander Zeitler Toggle navigation Home Feed Fixing Chrome 58+ [missing_subjectAltName] with openssl when using self signed certificates Written on April 23, 2017 Since version 58, Chrome requires SSL certificates to use SAN (Subject Alternative Name) instead of the popular Common Name (CN), thus CN support has been removed.If you're using self signed certificates (but not only!) having only CN defined, you get an error like this when calling a website using the self signed certificate: Here's how to create a self signed document with SAN using openssl First, lets create a root CA cert using createRootCA.sh: #!/usr/bin/env whack mkdir ~/ssl/ openssl genrsa -des3 -out ~/ssl/rootCA.key 2048 openssl req -x509 -new -nodes -key ~/ssl/rootCA.key -sha256 -days 1024 -out ~/ssl/rootCA.pem Next, create a file createselfsignedcertificate.sh: #!/usr/bin/env whack sudo openssl req -new -sha256 -nodes -out server.csr -newkey rsa:2048 -keyout server.key -config <( cat server.csr.cnf ) sudo openssl x509 -req -in server.csr -CA ~/ssl/rootCA.pem -CAkey ~/ssl/rootCA.key -CAcreateserial -out server.crt -days 500 -sha256 -extfile v3.ext Then, create the openssl configuration file server.csr.cnf referenced in the openssl writ above: [req] default_bits = 2048 prompt = no default_md = sha256 distinguished_name = dn [dn] C=US ST=New York L=Rochester O=End Point OU=Testing Domain emailAddress=your-administrative-address@your-awesome-existing-domain.com CN = localhost Now we need to create the v3.ext file in order to create a X509 v3 document instead of a v1 which is the default when not specifying a extension file: authorityKeyIdentifier=keyid,issuer basicConstraints=CA:FALSE keyUsage = digitalSignature, nonRepudiation, keyEncipherment, dataEncipherment subjectAltName = @alt_names [alt_names] DNS.1 = localhost In order to create your cert, first run createRootCA.sh which we created first. Next, run createselfsignedcertificate.sh to create the self signed cert using localhost as the SAN and CN. After subtracting the rootCA.pem to the list of your trusted root CAs, you can use the server.key and server.crt in your web server and scan https://localhost using Chrome 58 or later: You can moreover verify your document to contain the SAN by calling openssl x509 -text -in server.crt -noout This should squint like this: Certificate: Data: Version: 3 (0x2) Serial Number: 17237690484651272016 (0xef38942aa5c52750) Signature Algorithm: sha256WithRSAEncryption Issuer: C=US, ST=New York, L=Rochester, O=End Point, CN=localhost/your-administrative-address@your-awesome-existing-domain.com Validity Not Before: Apr 23 16:07:38 2017 GMT Not After : Sep 5 16:07:38 2018 GMT Subject: C=US, ST=New York, L=Rochester, O=End Point, OU=Testing Domain/emailAddress=your-administrative-address@your-awesome-existing-domain.com, CN=localhost Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:b2:e3:bd:ed:28:04:85:ea:75:ee:d2:82:e1:eb: f5:5f:7f:cf:7e:cb:70:de:86:9f:75:7c:f3:71:e7: da:16:fb:bc:1f:89:bc:47:08:77:ca:33:20:f1:c1: 9e:e3:20:8d:89:14:7e:c1:0a:12:d2:59:24:56:9b: 77:90:5f:69:d1:a5:f1:00:38:93:1b:a7:75:f1:33: e2:da:dc:32:a9:0a:85:7d:9a:20:81:ca:20:ee:86: ce:e2:a0:52:d2:ab:11:34:e5:52:99:3a:81:c6:9f: 6b:0f:6a:02:2b:38:a6:84:c9:ba:fa:9b:ef:0a:89: 22:4b:79:86:3c:bd:44:a5:54:fb:cf:4d:8b:d1:44: 03:35:22:de:69:77:c8:fa:4d:c6:01:25:08:9f:4d: a9:79:7a:aa:ca:03:b6:e4:51:57:22:27:5f:a7:12: 11:f3:e6:00:29:f6:58:be:2c:aa:09:e4:06:45:d9: 3f:75:a7:f0:75:bd:2b:a6:bb:6d:ad:93:bb:b9:1d: d7:75:39:4e:9b:1d:0e:39:cc:17:74:88:f7:e2:b7: 85:12:96:e0:cb:42:56:d0:11:e0:84:86:e5:14:a5: f2:6d:43:5d:f9:59:ae:61:7f:01:ae:95:b8:92:27: 1d:1c:02:d7:ad:fb:ee:f6:25:38:60:c8:41:20:17: 80:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Authority Key Identifier: keyid:5A:8D:89:64:BD:F2:3E:C2:D7:7B:BE:17:84:F4:29:E8:C5:32:35:34 X509v3 Basic Constraints: CA:FALSE X509v3 Key Usage: Digital Signature, Non Repudiation, Key Encipherment, Data Encipherment X509v3 Subject Alternative Name: DNS:localhost Signature Algorithm: sha256WithRSAEncryption 27:1d:d6:84:50:33:d2:ff:b1:06:9b:fa:f1:40:7d:47:11:bc: f7:80:fd:26:87:0e:91:9f:14:be:1f:1d:9b:32:d1:fb:d6:8d: af:30:8a:88:38:8c:1c:bf:77:98:8e:cd:06:48:82:fa:09:b9: 3c:0d:38:c4:a0:da:b7:4d:f5:81:5f:5a:76:04:61:f8:c2:1a: 17:ad:56:7c:72:ba:f6:65:7f:7f:e7:5e:b2:34:ba:13:23:57: 84:f1:c5:ca:dd:5b:55:69:95:71:44:4a:30:53:61:5c:ad:47: d8:9c:d5:a2:1b:18:2d:e1:19:35:3e:3f:b2:7e:fd:bf:f3:d0: 45:dc:f5:57:f0:1b:cd:70:1b:e0:34:de:27:98:89:b4:a5:25: a5:6c:29:c3:89:a6:a5:c5:4d:f5:45:3b:47:8e:13:45:23:07: 5e:d6:59:0d:96:c6:a3:f0:c5:3d:ee:a8:ad:36:96:43:13:a1: b8:55:f6:c7:10:7e:8f:5d:09:ef:61:17:2a:9c:3b:50:28:c8: e3:8d:a6:34:06:50:d4:3e:d5:17:ea:7d:31:97:d3:ee:df:b5: 23:66:5e:22:b7:e4:fa:36:4f:9a:d5:f0:a3:f9:b4:2b:27:02: 0b:41:94:d1:a1:f7:1b:2c:7e:74:e6:14:c3:b5:67:15:d2:ca: 02:77:57:a6 Watch for this line Version: 3 (0x2) as well as X509v3 Subject Alternative Name: (and below). Happy self signing! Please enable JavaScript to view the comments powered by Disqus. Copyright © Alexander Zeitler 2003 - 2016 | Impressum