Re: Configuration file for subjectAltName

2008-03-04 Thread Elia, Leonard F.
My Apologies. I was forwarding this to another email for archiving and I was sloppy with addressing before I hit send. Back to your program already in progress Lee Elia, Leonard F. wrote: On Tue, Sep 18, 2007 at 01:46:42PM -0500, Murphy, David F wrote: Exchange 2007 certificates and th

Re: Configuration file for subjectAltName

2008-03-04 Thread Elia, Leonard F.
On Tue, Sep 18, 2007 at 01:46:42PM -0500, Murphy, David F wrote: Exchange 2007 certificates and the autodiscovery functions: According to this Microsoft article: http://msexchangeteam.com/archive/2007/07/02/445698.aspx a certificate

Re: Configuration file for subjectAltName

2007-09-19 Thread Victor Duchovni
On Wed, Sep 19, 2007 at 04:09:29PM -0500, Murphy, David F wrote: > From what I can tell the extensions are just not being added to my > certificate. > > I see no indication the extensions were added in the output of the > following command ... > > [EMAIL PROTECTED]:Active] ssl.crt # openssl x509

RE: Configuration file for subjectAltName

2007-09-19 Thread Murphy, David F
ded? Thanks, David -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Murphy, David F Sent: Wednesday, September 19, 2007 1:07 PM To: openssl-users@openssl.org Subject: RE: Configuration file for subjectAltName I ran the following command, openssl x509 -t

RE: Configuration file for subjectAltName

2007-09-19 Thread Murphy, David F
= blah002.mysite.com <><><> Thanks, David -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Schwartz Sent: Wednesday, September 19, 2007 10:04 AM To: openssl-users@openssl.org Subject: RE: Configuration file for subjectAltName >

RE: Configuration file for subjectAltName

2007-09-19 Thread David Schwartz
> Once I purchase a trusted certificate, I was assuming both of these > warnings would be removed; I thought a SAN-certificate would allow me to > connect to the website using alternative names without getting the > "invalid or does not match" warning. > > Thanks, > > David What error are you get

RE: Configuration file for subjectAltName

2007-09-19 Thread Murphy, David F
PM To: openssl-users@openssl.org Subject: RE: Configuration file for subjectAltName > Below are my cnf file and the commands I tried. The key and the > crt were both created, however when I render the test website > using blah002.mysite.com I get a security warning message anyway. > I must h

RE: Configuration file for subjectAltName

2007-09-18 Thread David Schwartz
> Below are my cnf file and the commands I tried. The key and the > crt were both created, however when I render the test website > using blah002.mysite.com I get a security warning message anyway. > I must have done something wrong or left off a step ... It's not clear what you are trying to d

RE: Configuration file for subjectAltName

2007-09-18 Thread Murphy, David F
] [mailto:[EMAIL PROTECTED] Im Auftrag von Victor Duchovni Gesendet: Dienstag, 18. September 2007 21:27 An: openssl-users@openssl.org Betreff: Re: Configuration file for subjectAltName On Tue, Sep 18, 2007 at 09:17:23PM +0200, Buddy Butterfly wrote: > # subjectAltName = @alt_na

Re: Configuration file for subjectAltName

2007-09-18 Thread Victor Duchovni
On Tue, Sep 18, 2007 at 03:20:16PM -0500, Murphy, David F wrote: > Thanks Viktor and Buddy, > > Below is my cnf file and the commands I tried. The key and the > crt were both created, however when I render the test website using > blah002.mysite.com I get a security warning message anyway. I mu

RE: Configuration file for subjectAltName

2007-09-18 Thread Murphy, David F
- Von: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Im Auftrag von Victor Duchovni Gesendet: Dienstag, 18. September 2007 21:27 An: openssl-users@openssl.org Betreff: Re: Configuration file for subjectAltName On Tue, Sep 18, 2007 at 09:17:23PM +0200, Buddy Butterfly wrote: > # subjectAltN

AW: Configuration file for subjectAltName

2007-09-18 Thread Buddy Butterfly
: Configuration file for subjectAltName On Tue, Sep 18, 2007 at 09:17:23PM +0200, Buddy Butterfly wrote: > # subjectAltName = @alt_names > > should be uncommented :-) Did you read the comment above that line. > # Verisign managed PKI, does not yet support subjectAlt

Re: Configuration file for subjectAltName

2007-09-18 Thread Victor Duchovni
On Tue, Sep 18, 2007 at 09:17:23PM +0200, Buddy Butterfly wrote: > # subjectAltName = @alt_names > > should be uncommented :-) Did you read the comment above that line. > # Verisign managed PKI, does not yet support subjectAltName in CSRs, > # instead they prompt for these in t

AW: Configuration file for subjectAltName

2007-09-18 Thread Buddy Butterfly
# subjectAltName = @alt_names should be uncommented :-) -Ursprüngliche Nachricht- Von: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Im Auftrag von Victor Duchovni Gesendet: Dienstag, 18. September 2007 21:06 An: openssl-users@openssl.org Betreff: Re: Configuration file for

Re: Configuration file for subjectAltName

2007-09-18 Thread Victor Duchovni
On Tue, Sep 18, 2007 at 01:46:42PM -0500, Murphy, David F wrote: > Exchange 2007 certificates and the autodiscovery functions: > > According to this Microsoft article: > http://msexchangeteam.com/archive/2007/07/02/445698.aspx > a > cer

Configuration file for subjectAltName

2007-09-18 Thread Murphy, David F
Exchange 2007 certificates and the autodiscovery functions: According to this Microsoft article: http://msexchangeteam.com/archive/2007/07/02/445698.aspx a certificate with Subject Alternative Names (SAN) is the recommended method to pur