Hi Karen,
This is timely! We are pretty much in the same position over our
certificates and as one of them is up for renewal I had just asked out
infrastructure guys to provide advice as we'd like something generic -
am happy to let you know what we come up with - assuming we figure it
out!
Margaret
-----Original Message-----
From: This list is for current and potential users of the Innopac system
[mailto:[log in to unmask]] On Behalf Of Karen Stevenson
Sent: 20 October 2010 14:41
To: [log in to unmask]
Subject: SAN certificates for Millennium products
Can anyone advise me on generating a SAN (Subject Name Authority)
certificate? More specifically how to generate the certificate signing
request so that I can then request the SAN certificate.
Currently we have separate certificates for Millennium WebOPAC and for
Encore. We're preparing to have SSO installed so we need to have a
wildcard or SAN certificate instead. CSDirect tells me to 'Specify the
main domain name that you will be using on the certificate. When you
submit the CSR to the certificate vendor, indicate that your request is
for a SAN certificate and provide the additional names that you would
like added'. However our University security team tell me that's not
acceptable, the certificate vendor can only sign what is generated, not
add in additional names.
I'm looking for clues as to what to do next. If anyone has successfully
installed a SAN certificate for Millennium products, please in touch!
Thanks,
Karen
---------------------------------------
Karen Stevenson
Library Management System Co-ordinator
Direct Line: +44 (0)141 330 6724
Library,
University of Glasgow,
Hillhead Street,
Glasgow, G12 8QE
www.lib.gla.ac.uk
The University of Glasgow, charity number SC004401
----------------------------------------
This message has been scanned for viruses by Websense Hosted Email Security - www.websense.com
|