Quanah Gibson-Mount wrote:
That would be a problem if "server-timo.van-roermud.nl" is not in
subjectAltName for the certs.
I changed the certificate (self signed), it now looks like this (only
the relevant parts):
Certificate:
Data:
<cut>
Signature Algorithm: sha1WithRSAEncryption
Issuer: C=NL, ST=Noord-Brabant, L=Eindhoven, O=van-roermund.nl,
CN=van-roermund.nl/[EMAIL PROTECTED]
<cut>
Subject: C=NL, ST=Noord-Brabant, O=van-roermund.nl,
CN=van-roermund.nl/[EMAIL PROTECTED]
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public Key: (2048 bit)
<cut>
X509v3 extensions:
X509v3 Basic Constraints:
CA:FALSE
<cut>
X509v3 Subject Alternative Name:
DNS:van-roermund.nl, DNS:server-timo.van-roermund.nl,
DNS:www.van-roermund.nl, DNS:imap.van-roermund.nl,
DNS:smtp.van-roermund.nl, DNS:ftp.van-roermund.nl
So my FQDN ("server-timo.van-roermund", double checked with "hostname
-f") is now part of subjectAltName. However, it still doesn't work.
Regards,
Timo
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
