How to add subject alernative name to ssl certs?

Question

I\'m using openssl to create self-signed certs. I\'m getting this error with the certs I generated:

javax.net.ssl.SSLHandshakeException: ja

Answer 1

Both IP and DNS can be specified with the keytool additional argument -ext SAN=dns:abc.com,ip:1.1.1.1

Example:

keytool -genkeypair -keystore  -dname "CN=test, OU=Unknown, O=Unknown, L=Unknown, ST=Unknown, C=Unknown" -keypass  -storepass  -keyalg RSA -alias unknown -ext SAN=dns:test.abc.com,ip:1.1.1.1