PHP CSR with subjectAltName

csr.php

<?php

$keyConfig = [
  'private_key_type' => OPENSSL_KEYTYPE_RSA,
  'private_key_bits' => 2048,
];
$key = openssl_pkey_new($keyConfig);

$sanDomains = [
  'mydomain.tld',
  'seconddomain.tld',
];

$dn = [
  'commonName' => reset($sanDomains),
];

$csrConfig = [
  'config' => __DIR__ . '/openssl.cnf',
  'req_extensions' => 'v3_req',
  'digest_alg' => 'sha256',
];
$addPrefix = function ($value) {
  // Important: Sanatize domain value and check if a valid domain
  return 'DNS:' . $value;
};
$sanDomainPrefixed = array_map($addPrefix, $sanDomains);
putenv('PHP_PASS_SUBJECTALTNAME=' . implode(',', $sanDomainPrefixed));

$csr = openssl_csr_new($dn, $key, $csrConfig);

if (false === $csr) {
  while (($e = openssl_error_string()) !== false) {
    echo $e . '\n';
  }
  return;
}
openssl_csr_export($csr, $csrout);

echo $csrout;

openssl.cnf

[ req ]
distinguished_name = req_distinguished_name
req_extensions = v3_req

[ req_distinguished_name ]

[ v3_req ]
basicConstraints = CA:FALSE
keyUsage = nonRepudiation, digitalSignature, keyEncipherment
subjectAltName = ${ENV::PHP_PASS_SUBJECTALTNAME}

Please help me ... I generated a san csr using . But how can I get subjectaltname using php

Please help me ... I generated a san csr using . But how can I get subjectaltname using php

try

$out = openssl_x509_parse($csrout);
var_dump($out);

I basically copied the script above, but added some comments - see also https://gist.github.com/vreemt/7070fced19b0eddbce75edfc5cbf958e

@thestorm-star openssl_x509_parse doesn't support parsing a CSR. Please take my https://gist.github.com/dol/e9f3d682529ae7ee368f0e6862e16a87 example that shows how to do this with an X501 parser library.

Hiii Please how can i get private key from pfx

On Monday, March 2, 2020, Dominic ***@***.***> wrote: @thestorm-star openssl_x509_parse doesn't support parsing CSR. Please

take my https://gist.github.com/dol/e9f3d682529ae7ee368f0e6862e16a87 example that shows how to do this with an X501 parser library.

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub, or unsubscribe.<

https://ci5.googleusercontent.com/proxy/y_aAg6f2L6ioF4bsHfDwzWzpyqonFS-8FiLcUuRG2M3BYNirndHIMRKOQhxITxM4I1FMOFHfFWV7fPFC04ySiyTGgRqBjzPFGQ3lMpwVha54Qseg8XfGn4iFD72aXSAHlrMGdLH5FLEBQuvgHgT528weQp4dfCWN-0jaoMZebILuwt4E_-9tXv30-XYDCw-9Em5WuHSOnN5QiUvEviQwjeBUke1S4uuyTnCNNCI=s0-d-e1-ft#https://github.com/notifications/beacon/AORPCZOV6K25H6F6XEXPOC3RFONONA5CNFSM4KUQMB42YY3PNVWWK3TUL52HS4DFVNDWS43UINXW23LFNZ2KUY3PNVWWK3TUL5UWJTQAGDCG6.gif>

@thestorm-star https://lmgtfy.com/?q=php+read+pfx+private+key