[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: StartTLS with a host alias

To: robertminsk@yahoo.com
Subject: Re: StartTLS with a host alias
From: Hallvard B Furuseth <h.b.furuseth@usit.uio.no>
Date: Sat, 7 Jun 2008 20:10:52 +0200
Cc: openldap-software@openldap.org
In-reply-to: <516293.97051.qm@web32503.mail.mud.yahoo.com>
References: <516293.97051.qm@web32503.mail.mud.yahoo.com>

Robert Minsk writes:
>My cert on my LDAP server contains multiple commonName entries.
>> openssl x509 -noout -in s014-ldap-cert.pem -subject
> subject= /C=US/ST=California/O=FooBar/CN=s014.cgi.foobar.com/CN=ldap1.cgi.foobar.com/CN=s14.cgi.foobar.com

There is only supposed to be one CN in the certificate name.
However you can put multiple hostnames in the certificate's
Subject Alternative Name (aka Subject Alt Name) extension.

-- 
Hallvard

Follow-Ups:
- Re: StartTLS with a host alias
  - From: Howard Chu <hyc@symas.com>

References:
- StartTLS with a host alias
  - From: Robert Minsk <robertminsk@yahoo.com>

Prev by Date: Re: can syncrepl do this?
Next by Date: Re: StartTLS with a host alias
Index(es):
- Chronological
- Thread