Re: Adding an email address to a SAN

On 18 October 2012 21:35, Kingsley Idehen <kidehen@openlinksw.com> wrote:

>  On 10/18/12 2:31 PM, Melvin Carvalho wrote:
>
>
>
> On 18 October 2012 20:26, Kingsley Idehen <kidehen@openlinksw.com> wrote:
>
>>  On 10/18/12 2:12 PM, Andrei Sambra wrote:
>>
>>> On 10/18/12 19:19, Melvin Carvalho wrote:
>>>
>>>> It seems for the dogfooding use case of signing your emails for SMIME
>>>> you also need to add your email address to your SAN.
>>>>
>>>> Assuming I have got that correct, does anyone know an easy way to do
>>>> this?
>>>>
>>> You can use https://my-profile.eu :)
>>>
>>> There's a cert generation page (https://my-profile.eu/certgen.php) in
>>> which you can specify an email address to be added along your WebID URI.
>>>
>>> Andrei
>>>
>>>
>>>
>>>   Trouble is that Melvin wants to complete the process by hand :-)
>>
>
> I dont necessarily need to do this by hand.
>
>
> If you don't need to do it by hand then you have existing services in
> place to help you. Andrei pointed you to my-profile.eu (which you are
> familiar with) and I you can also use the service at:
> http://id.myopenlink.net/certgen .
>
>  But I'd like to keep my existing cert just ADD the email on top of my
> http: URI.
>
>
> You mean you want to keep your existing WebID since you can't patch a
> generated cert.
>
>
> Reason is that I have the same key for a long time and it's also my GPG
> key, SSH, etc.
>
>
> You can have multiple keys in the SAN of certificates that we produce. Or
> even simpler, cross reference your URIs in your profile graphs via
> owl:sameAs.
>

OK, I've managed to create a special cert for email only with the same key.

What should be the EXACT SAN for signing email?

I have:

URI: http://melvincarvalho.com/#me, mailto:melvincarvalho@gmail.com

But it's still not working yet ...


>
>
>
>
>>
>> --
>>
>> Regards,
>>
>> Kingsley Idehen
>> Founder & CEO
>> OpenLink Software
>> Company Web: http://www.openlinksw.com
>> Personal Weblog: http://www.openlinksw.com/blog/~kidehen
>> Twitter/Identi.ca handle: @kidehen
>> Google+ Profile: https://plus.google.com/112399767740508618350/about
>> LinkedIn Profile: http://www.linkedin.com/in/kidehen
>>
>>
>>
>>
>>
>>
>
>
> --
>
> Regards,
>
> Kingsley Idehen	
> Founder & CEO
> OpenLink Software
> Company Web: http://www.openlinksw.com
> Personal Weblog: http://www.openlinksw.com/blog/~kidehen
> Twitter/Identi.ca handle: @kidehen
> Google+ Profile: https://plus.google.com/112399767740508618350/about
> LinkedIn Profile: http://www.linkedin.com/in/kidehen
>
>
>
>