[ 
https://issues.apache.org/jira/browse/KNOX-1912?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16874516#comment-16874516
 ] 

Kevin Risden commented on KNOX-1912:
------------------------------------

When we create the SAN, since it can have multiple entries we should set SAN to 
have localhost and the hostname of the Knox host.

> Self signed cert should set CN and SAN
> --------------------------------------
>
>                 Key: KNOX-1912
>                 URL: https://issues.apache.org/jira/browse/KNOX-1912
>             Project: Apache Knox
>          Issue Type: Improvement
>          Components: Server
>            Reporter: Kevin Risden
>            Assignee: Kevin Risden
>            Priority: Major
>             Fix For: 1.3.0
>
>
> Currently the self signed certificate doesn't set the SAN entry and only puts 
> localhost in the CN. SAN is used to verify certificates instead of CN for a 
> lot of tools. We should ensure that the SAN is filled in.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

Reply via email to