2007/10/3, Enrico M. V. Fasanelli <Enrico.M.V.Fasanelli at le.infn.it>: > Hi Victor, > > have you tried with a certificate that contains the alternate name of > the server? > > Something like > X509v3 Subject Alternative Name: DNS:fds.mydomain.com, > DNS:fds1.mydomain.com yes .... apparent that Subject Alternative Name (SubjectAltName) is the best solution for this problem !!!! but, i have one other problem !!! :-) my certificates (all) is signed for cacert.org .. and in the Certificate Wizard in the DS Console, I don't look one field for SubjectAltName.. and in ShowDN option I write: CN="fds.multi.com",SubjectAltName=""DNS:fds.multi.com"",SubjectAltName=""DNS:fds2.multi.com"" /CN="fds.multi.com"/SubjectAltName=""DNS:fds.multi.com""/SubjectAltName=""DNS:fds2.multi.com""/ and others, but in the step 4/4 I receive this error: ------------------------------------------------------- Unable to convert DN to certificate name. -----BEGIN NEW CERTIFICATE REQUEST----- ------------------------------------------------------- in the internet i read various howtos, manual and others that show how usage the certuil for create certificates with SubjectAltName, but it alone work with/for self-signed certificates !!! http://www.redhat.com/docs/manuals/dir-server/ag/7.1/ssl.html#1085091 http://directory.fedoraproject.org/wiki/Howto:SSL#Using_Subject_Alt_Name and I run this command: openssl genrsa -out slapd-fds2-key3.db 2048 openssl req -new -key slapd-fds2-key3.db -out vhs.csr -subj 'CN=fds.multi.com/subjectAltName=DNS:fds.multi.com/subjectAltName=DNS:fds2.multi.com' and work fine... i get one certificate request with all fields and send for my CA (cacert.org) and I receive the certificate signed with all fields, but i dont how install it for CLI !!! for the wizard I receive one other error "this key not found - this certificate is generate in the server ???" any solution ??? -- -- Victor Hugo dos Santos Linux Counter #224399
