0
$\begingroup$

I have a program which acts as a node in a larger system. Those nodes can be connected to form a tree. TLS with mutual authentication is required, which means that each node has it's own certificate. Is it safe to use the same certification for both server authentication (when someone connects to the node) and client authentication plus authorization (when node connects to someone else)?

Also all my nodes require unique IDs within the system. This ID is similar to URI, but in "reverse notation" (so top most element is at the beginning). Should I put this value into subjAltName (and if so, as what value?) and put node's domain name into CN in DN, or should I put this ID into CN in DN and node's domain name into subjAltName?

Improve this question
$\endgroup$

1 Answer 1

Reset to default
1
$\begingroup$

What I did in the end was to use DN/UID (OID: 0.9.2342.19200300.100.1.1) to store this value, exactly as it is suggested in an answer to this question.

Improve this answer
$\endgroup$

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.