Multiple commonNames or using subjectAltName problems.

[Lee Colclough]

Hi,   I have created a client/server app that talks via SOAP using SSL.   Generating the certificates is fine provided the commonName is just for the machine on which a particular server is running.  I would like to generate a certificate that works for all copies of my server application on that domain.    For example, in my openssl.cnf I have this:     [ req_distinguished_name ] <snip> commonName               = Common Name (hostname, IP, or your name) commonName_default    = Hostname1.DomainName.local commonName_max       = 64 subjectAltName             = Alternative Name subjectAltName_default = Hostname2.DomainName.local     Now, if I am running the server on Hostname1 then all is fine, but if I am running in on Hostname2 it doesn't work (my client cannot contact it).     What I really want is:   [ req_distinguished_name ] <snip> commonName               = Common Name (hostname, IP, or your name) commonName_default   = *.DomainName.local commonName_max       = 64   but that doesn't work either.  Can anyone help?   Thanks   Lee.