On Thu, Sep 24, 2009 at 5:58 AM, Eygene Ryabinkin <[log in to unmask]> wrote:
> Good day.
>
> Had tried to view the SAM results from lcg-sam.cern.ch and was warned by
> Firefox that site uses certificate with the different host name --
> sam202.cern.ch. And it turns out that subjectAltName is absent (and the
> correct way to do the business will be to put DNS:lcg-sam.cern.ch,
> DNS:sam202.cern.ch, DNS:<whatever> into this extention to make everyone
> happy). Am I missing something or things are really broken?
Yes,
As of last week we (CERN CA users) can request certs with alt host
names.
>
> I recall that in the past there were simular issues and, by the way, new
> certificate was just issued at 21st of September, so I presume that most
> people just ignore the warnings from the browser about the DNS name
> mismatches :((
> --
Yes :((
Please submit a GGUS.
> Eygene Ryabinkin, Russian Research Centre "Kurchatov Institute"
>
--
Steve Traylen
|