[Date Prev][Date Next]
[Chronological]
[Thread]
[Top]
Re: OpenLDAP and wildcard SSL certs
Thanks for the feedback:
On Thu, Apr 14, 2005 at 11:33:16AM -0400, Mike Wisener wrote:
> Did you verify the subjectAltName was actually added on your signed
> certificate? openssl x509 -in <cert> -text
Yes, I did.
> As far as I know, CN should be the fully qualified domain
> name. subjectAltName should have the wildcard.
But that defeats the whole purpose. Then you'd have to have one cert.
for each FQDN and then what's the point of using a wildcard at all?
Or am I misunderstanding what you're saying?
--
Brent J. Nordquist <b-nordquist@bethel.edu> N0BJN
Other contact information: http://kepler.its.bethel.edu/~bjn/contact.html