Re: SSL certificates, kerberos keytabs, and load balancing [Virus checked]

To: denis.havlik@t-mobile.at
Subject: Re: SSL certificates, kerberos keytabs, and load balancing [Virus checked]
From: Michael Ströder <michael@stroeder.com>
Date: Tue, 13 Apr 2004 12:24:24 +0200
Cc: openldap-software@OpenLDAP.org
In-reply-to: <OFEF01367F.0FB9C36E-ONC1256E75.00354584-C1256E75.00356D88@t-mobile.at>
References: <OFEF01367F.0FB9C36E-ONC1256E75.00354584-C1256E75.00356D88@t-mobile.at>
User-agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.6) Gecko/20040113

denis.havlik@t-mobile.at wrote:


 >commonName=ldap1.example.com
 >subjectAltName=commonName: ldap.example.com

Bingo!

You should test whether all your SSL/TLS-enabled LDAP applications really look at subjectAltName extension!

Ciao, Michael.

References:
- Antwort: Re: SSL certificates, kerberos keytabs, and load balancing [Virus checked]
  - From: denis.havlik@t-mobile.at