On Tue, Mar 15, 2005, Vu Pham wrote:

> 
> I use openssl to build a self-signed certificate for my web server. I
> imported the CA cert to my PC already.
> When I open the web server, IE says the certificate is from a trusted CA as
> expected, the security certificate is valid, but it says the name is
> invalid.
> 
> I view the certificate and the CN name matches the web server name.
> 
> I think the requirement is CN matches the server name, is it right ?
> 

It should match the hostname in the URL it is accessed as.

Steve.
--
Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage
OpenSSL project core developer and freelance consultant.
Funding needed! Details on homepage.
Homepage: http://www.drh-consultancy.demon.co.uk
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to