dhiva <[EMAIL PROTECTED]> wrote in message news:<[EMAIL PROTECTED]>... > Jean-Marc Desperrier wrote: > > dhiva wrote: > > > >> I have a Cert with CN as host name and multiple host name listed on > >> SubjectAltName extension, but i am getting "Domain name mismatch warning" > > > > > > ? > > > > I'm sorry, but I've never heard of this way of using SubjectAltName for > > server certificates being normalized anywhere. > > Can you supply information, if this is the case ? > > http://www.ietf.org/rfc/rfc2459.txt - Jan 1999 > Section "4.2.1.7 Subject Alternative Name" > > http://www.ietf.org/rfc/rfc3280.txt -April 2002 > Section "4.2.1.7 Subject Alternative Name" > > Let me know if i misunderstood. > > MORE INFO: > I have a SSL Cert with CN=descriptive server name and Multiple host name > s(server A1, server A2 & server A3) listed on SubjectAltName extention. > The Current Version of IE 5 does the host name chk against the CN of > Subject, If doesn't match then it does the same chk against the host > name list of SubjectAltName; it doesn't throw any warning if the host > name is present in the list and continue to work. > And we feel this is the right way of handling the SSL Cert AltName > Extension. We would like to have this functionality built-in because > most of our community uses Netscape & Mozilla!!! > > I am not sure about the hostname check with OPERA browser. But i am sure > its not throwing a SECURITY WARNING.. > > thanks > dhiva
I also need this functionality. David Webb VMS and Unix team leader CCSS Middlesex University
