RE: Pop, imap cert

2003-12-02 Thread Lee Dilkie
> > > CN=pop.xxx.com > > CN=smtp.xxx.com > > CN=www.xxx.com > > > > That way, pop3, smtp and https can use the same certificate > and the clients > > won't complain of a name mismatch. > > How do add (or create) multiple CNs in a certificate? I used openssl to create a root certificate and then

RE: Pop, imap cert

2003-12-01 Thread Antonio Querubin
On Mon, 1 Dec 2003, Lee Dilkie wrote: > i use the same certificate but I added all three names, ie. > > CN=pop.xxx.com > CN=smtp.xxx.com > CN=www.xxx.com > > That way, pop3, smtp and https can use the same certificate and the clients > won't complain of a name mismatch. How do add (or create) mul

Re: Pop, imap cert

2003-12-01 Thread Randall Perry
>> the server name shows up as the CN in the server certificate, >> for example. > > i use the same certificate but I added all three names, ie. > > CN=pop.xxx.com > CN=smtp.xxx.com > CN=www.xxx.com > Didn't know you could modify a cert purchased from a CA. Or are you saying when you originall

Re: Pop, imap cert

2003-12-01 Thread Rich Salz
Randall Perry wrote: I've got separate key, cert files for apache. Do I need to embed the key and passphrase in the server to work with ipop3d? The server needs access to the private key that matches the cert. /r$ -- Rich Salz, Chief Security Architect DataPower Technology

Re: Pop, imap cert

2003-12-01 Thread Randall Perry
I've got separate key, cert files for apache. Do I need to embed the key and passphrase in the server to work with ipop3d? > Randall Perry wrote: >> Can a web server cert be used for secure pop, imap servers? > > Probably. The server doesn't care. It's what the clients do when > verifying the

RE: Pop, imap cert

2003-12-01 Thread Lee Dilkie
> the server name shows up as the CN in the server certificate, > for example. i use the same certificate but I added all three names, ie. CN=pop.xxx.com CN=smtp.xxx.com CN=www.xxx.com That way, pop3, smtp and https can use the same certificate and the clients won't complain of a name mismatch.

Re: Pop, imap cert

2003-12-01 Thread Rich Salz
Randall Perry wrote: Can a web server cert be used for secure pop, imap servers? Probably. The server doesn't care. It's what the clients do when verifying the server's identity that matters. It will probably help if the server name shows up as the CN in the server certificate, for example. /