Re: Multiple domains in one certificate

2006-01-05 Thread Koos Vriezen
On Thu, Jan 05, 2006 at 03:17:41PM +0100, Dr. Stephen Henson wrote: > On Thu, Jan 05, 2006, Koos Vriezen wrote: > > > > > I really want this for my certicates, as the same webserver is used for > > various domains in our setup. I can't get this working though. > > I've started with http://www.ecl

Re: Multiple domains in one certificate

2006-01-05 Thread Dr. Stephen Henson
On Thu, Jan 05, 2006, Koos Vriezen wrote: > > I really want this for my certicates, as the same webserver is used for > various domains in our setup. I can't get this working though. > I've started with http://www.eclectica.ca/howto/ssl-cert-howto.php#cnfig > and the commands I do are (in directo

Re: Multiple domains in one certificate

2006-01-05 Thread Koos Vriezen
On 2005-11-06 0:51 Goetz Babin-Ebell wrote: An extract from my openssl.cnf: > [...] > [ ssl_cert ] > > # These extensions are added when 'ca' signs a request. > [...] > > # This stuff is for subjectAltName and issuerAltname. > # Import the email address. > # subjectAltName=email:copy > # An alte

Re: Multiple domains in one certificate

2005-11-06 Thread Goetz Babin-Ebell
Mark van Beek wrote: Thanx for all the info, after a lot of trying I have created a working certificate. For now I have just a few question left, is it possible (without (shell)scripts) to (and how to do so): 1) include a .conf file with the subjectAltName extension configured for a certain certi

RE: Multiple domains in one certificate

2005-11-06 Thread Mark van Beek
Behalf Of Goetz Babin-Ebell > Sent: zondag 6 november 2005 1:52 > To: openssl-users@openssl.org > Subject: Re: Multiple domains in one certificate > > [EMAIL PROTECTED] wrote: > >> -Original Message- > >> From: [EMAIL PROTECTED] [mailto:owner-openssl- > >

Re: Multiple domains in one certificate

2005-11-05 Thread Goetz Babin-Ebell
[EMAIL PROTECTED] wrote: -Original Message- From: [EMAIL PROTECTED] [mailto:owner-openssl- Yep. But CA's typically put them in both anyway. On the other hand, if every site appears within the same domain (e.g. foo.domain.com, bar.domain.com, baz.domain.com), it might be better to get a

RE: Multiple domains in one certificate

2005-11-05 Thread webmaster
> -Original Message- > From: [EMAIL PROTECTED] [mailto:owner-openssl- > [EMAIL PROTECTED] On Behalf Of Joseph Oreste Bruni > Sent: vrijdag 4 november 2005 23:32 > To: openssl-users@openssl.org > Subject: Re: Multiple domains in one certificate > > Yep. But CA'

Re: Multiple domains in one certificate

2005-11-04 Thread Joseph Oreste Bruni
Yep. But CA's typically put them in both anyway. On the other hand, if every site appears within the same domain (e.g. foo.domain.com, bar.domain.com, baz.domain.com), it might be better to get a domain cert that contains "*.domain.com". -Joe On Nov 4, 2005, at 3:17 PM, Goetz Babin-Ebell

Re: Multiple domains in one certificate

2005-11-04 Thread Goetz Babin-Ebell
Joseph Oreste Bruni wrote: You can have as many commonNames as you want. That goes for subjectAltName fields too. I do that on an apache server (not using TLS) that needs to host more than one SSL site. Every browser I've used is okay with certs. that have multiple CN's. But he should use the

Re: Multiple domains in one certificate

2005-11-04 Thread Joseph Oreste Bruni
You can have as many commonNames as you want. That goes for subjectAltName fields too. I do that on an apache server (not using TLS) that needs to host more than one SSL site. Every browser I've used is okay with certs. that have multiple CN's. On Nov 4, 2005, at 6:27 AM, [EMAIL PROTECTED]

Multiple domains in one certificate

2005-11-04 Thread webmaster
Hi, I know it isn't the correct way to do stuff, but since it's only test server I want to do the following: I have a server with 2 ethernet cards, one for internal net, one for the external. Both have different IP-addresses and different domain names (external has even some c-names). What I want