Theres actually a valid reason. The client pulls the redirection
information out of the certificate Common Name. So if the CN is
*.domain.com, it will try to redirect you to that and obviously fail.
I have never personally tried it where the SAN in the cert was the cas
name, so I don't know if we can pull the name from there as well, but my
instinct says probably not.
Nate
Rob Chee wrote:
Let us know if it works. That will be a good data point. I've never
actually tried a wildcard cert, I just remember reading the
documentation saying that it's not supported.
Rob
Emmanuel Joe wrote:
Hi Rob,
I'm looking the star_emmanuel.edu.crt file now it has the line
Subjet:
CN = *.emmanuel.edu
OU = Information Technology
O = Emmanuel College
L = Boston
S = Massachusetts
C = US
and the line
subjectAlternative Name :
DNS Name=cas.emmanuel.edu
DNS Name=emmanuel.edu
DNS Name=*.emmanuel.edu
Which if I'm not mistaken will work