Good day.
Had tried to view the SAM results from lcg-sam.cern.ch and was warned by
Firefox that site uses certificate with the different host name --
sam202.cern.ch. And it turns out that subjectAltName is absent (and the
correct way to do the business will be to put DNS:lcg-sam.cern.ch,
DNS:sam202.cern.ch, DNS:<whatever> into this extention to make everyone
happy). Am I missing something or things are really broken?
I recall that in the past there were simular issues and, by the way, new
certificate was just issued at 21st of September, so I presume that most
people just ignore the warnings from the browser about the DNS name
mismatches :((
--
Eygene Ryabinkin, Russian Research Centre "Kurchatov Institute"
|