On Tue, Mar 15, 2005, Vu Pham wrote: > > I use openssl to build a self-signed certificate for my web server. I > imported the CA cert to my PC already. > When I open the web server, IE says the certificate is from a trusted CA as > expected, the security certificate is valid, but it says the name is > invalid. > > I view the certificate and the CN name matches the web server name. > > I think the requirement is CN matches the server name, is it right ? >
It should match the hostname in the URL it is accessed as. Steve. -- Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage OpenSSL project core developer and freelance consultant. Funding needed! Details on homepage. Homepage: http://www.drh-consultancy.demon.co.uk ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]