英文:
What is the purpose of aliases in x509 certificate?
问题
我目前正在进行PKI工作，我想知道除了提供“友好名称”（Oracle文档）外，别名是否还有其他用途？
到目前为止，我已经通过为每个证书链设置唯一的别名来实施证书链的验证。因此，如果证书颁发者是根证书，用户必须指定主体的别名；如果不是根证书，主体的别名会从颁发者“继承”。
处理别名的正确方法是什么？
谢谢。
英文:
I am currently working on a PKI and I was wondering if aliases have some other purpose except providing "a friendly name" (Oracle documentation)?
So far I have implemented validation of certificate chains by having unique alias for every chain. So if a certificate issuer is root, then a user must specify subjects' alias, and if not root, subjects' alias is "inherited" from issuer.
What is the correct way of dealing with aliases?
Thanks
专注分享java语言的经验与见解，让所有开发者获益！
评论