0
$\begingroup$

I have a program which acts as a node in a larger system. Those nodes can be connected to form a tree. TLS with mutual authentication is required, which means that each node has it's own certificate. Is it safe to use the same certification for both server authentication (when someone connects to the node) and client authentication plus authorization (when node connects to someone else)?

Also all my nodes require unique IDs within the system. This ID is similar to URI, but in "reverse notation" (so top most element is at the beginning). Should I put this value into subjAltName (and if so, as what value?) and put node's domain name into CN in DN, or should I put this ID into CN in DN and node's domain name into subjAltName?

$\endgroup$
1
$\begingroup$

What I did in the end was to use DN/UID (OID: 0.9.2342.19200300.100.1.1) to store this value, exactly as it is suggested in an answer to this question.

$\endgroup$

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.