Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Code Block
openssl req -new -x509 -days 36503652 -nodes -sha256 \
    -subj '/CN=https:\/\/app.example.com\/saml' \
    -addext 'subjectAltName=DNS:app.example.com,URI:https://app.example.com/saml' \
    -out saml-app.example.com.crt \
    -keyout saml-app.example.com.key
Expand
titleWhy “3652” days instead of “3650”?

There are 2 leap years in most 10-year time spans. (Most, because 2100 is not a leap year due to being divisible by 100 but not 400.)

The subject and subjectAltName (lines 2 & 3) are not necessary for Shibboleth or SAML in general, but the information can be useful for management.

...