my CN is pki.fcul.research.ec.org, which is the supposed.
This doesn't match ra.fcul.research.ec.org. If you have more than one name for your Apache then you must do the following (more details in the OpenCA guide):
1. CN in the subject (this is for netscape and mozilla 1.0) CN=(pki|ra).fcul.research.ec.org
2. DNS in the subject alternative name (this is for all standard compliant browsers)
DNS:pki.fcul.research.ec.org;DNS:ra.fcul.research.ec.org;email:[EMAIL PROTECTED]
Alternatively you can add the IP to the subject alternative name (IP:123.123.123.123) which is the last chance if the DNS matches fail.
The Subject includes the serial number. Is this a problem?
No.
Michael -- ------------------------------------------------------------------- Michael Bell Email: [EMAIL PROTECTED] ZE Computer- und Medienservice Tel.: +49 (0)30-2093 2482 (Computing Centre) Fax: +49 (0)30-2093 2704 Humboldt-University of Berlin Unter den Linden 6 10099 Berlin Email (private): [EMAIL PROTECTED] Germany http://www.openca.org
------------------------------------------------------- The SF.Net email is sponsored by EclipseCon 2004 Premiere Conference on Open Tools Development and Integration See the breadth of Eclipse activity. February 3-5 in Anaheim, CA. http://www.eclipsecon.org/osdn _______________________________________________ Openca-Users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/openca-users
