SubjectRule for several Fields

[Yann57330]

Hello,

Thanks for this great Module ! Really usefull
I'm trying to allow to use CN and OU in Subject field.
Your example illustrate only Subect rule for CN.
How can we manage several SubjectRule for several fields ?
I have tried to indicate 2 inside the with no success.

Thanks for your help.
BR,
Yannick

[Sleepw4lker]

Hello @Yann57330 and thanks for your feedback: Have a look at this: https://github.com/Sleepw4lker/TameMyCerts/blob/main/user-guide/subject-rules.adoc and this: https://github.com/Sleepw4lker/TameMyCerts/blob/main/examples/Sample_Offline_Webserver.xml.

You would have to define another SubjectRule directive containing the organizationalUnitName field.

Hope that helps
Cheers

[Yann57330]

Hi,

Thanks. I have tried with 2 SubjectRule

<Subject> <SubjectRule> <Field>commonName</Field> <Mandatory>true</Mandatory> <MaxOccurrences>1</MaxOccurrences> <MaxLength>64</MaxLength> <Patterns> <Pattern> <Expression>^[a-zA-Z0-9_\-]*$</Expression> </Pattern> </Patterns> </SubjectRule> <SubjectRule> <Field>organizationalUnitName</Field> <Mandatory>false</Mandatory> <MaxOccurrences>1</MaxOccurrences> <MaxLength>100</MaxLength> <Patterns> <Pattern> <Expression>^[a-zA-Z0-9_\.\-\:\[\]]*$</Expression> </Pattern> </Patterns> </SubjectRule> </Subject>

That seems not to work.
I will carry on with this syntax to troubleshoot as your example for Webserver confirm its...

BR,
Yannick

[Sleepw4lker]

Hello @Yann57330 your configuration should work, given you included the <CertificateRequestPolicy... headers and footers in your XML file. I can only assume that maybe your regular expression does not match. Did you have a look at the event log of your machine? Does the request get denied (then, for whar reason?) or approved (is the policy applied at all)?

[Yann57330]

Hello, @Sleepw4lker.
I’ve tried again from start today and it is perfectly working ! :-)
Thanks a lot for your fast answer yesterday.
You are probably right, there was maybe missing something in the pattern…
I’ve not checked in event log. I will for futur.
Thanks again for the module. Great work.
Kind regards,
Yannick

[Sleepw4lker]

any update on this @Yann57330 ?

Cheers

[Yann57330]

Yes @Sleepw4lker it works as mentioned in my previous comment.

Kind regards

[Sleepw4lker]

Awesome, thanks for the clarification.