Steve Traylen wrote:
> On Thu, Sep 24, 2009 at 5:58 AM, Eygene Ryabinkin <[log in to unmask]> wrote:
>> Good day.
>>
>> Had tried to view the SAM results from lcg-sam.cern.ch and was warned by
>> Firefox that site uses certificate with the different host name --
>> sam202.cern.ch. And it turns out that subjectAltName is absent (and the
>> correct way to do the business will be to put DNS:lcg-sam.cern.ch,
>> DNS:sam202.cern.ch, DNS:<whatever> into this extention to make everyone
>> happy). Am I missing something or things are really broken?
>
> Yes,
>
> As of last week we (CERN CA users) can request certs with alt host
> names.
>
>> I recall that in the past there were simular issues and, by the way, new
>> certificate was just issued at 21st of September, so I presume that most
>> people just ignore the warnings from the browser about the DNS name
>> mismatches :((
>> --
> Yes :((
>
> Please submit a GGUS.
#47927 is presumably the same issue. Could you address that too please.
Chris
|