Nuno Miguel Neves wrote:Sorry. Typo error. The CN is pki.fcul.research.ec.org and I'm acessing pki.fcul.research.ec.org.
my CN is pki.fcul.research.ec.org, which is the supposed.
This doesn't match ra.fcul.research.ec.org. If you have more than one name for your Apache then you must do the following (more details in the OpenCA guide):
You can access it and see for yourself.
1. CN in the subject (this is for netscape and mozilla 1.0) CN=(pki|ra).fcul.research.ec.org
2. DNS in the subject alternative name (this is for all standard compliant browsers)
DNS:pki.fcul.research.ec.org;DNS:ra.fcul.research.ec.org;email:[EMAIL PROTECTED]
Alternatively you can add the IP to the subject alternative name (IP:123.123.123.123) which is the last chance if the DNS matches fail.
The Subject includes the serial number. Is this a problem?
No.
Michael
I've put everything you said (DNS, IP), and still no luck... :(
Does it matter that pki.fcul.research.ec.org is in fact a CNAME and not an A record?
Thanks,
--
[EMAIL PROTECTED] Dept. Informatica, Fac. Ciencias,
|\ | |\ | Tel: +351 21 7500528 Univ. Lisboa, Bloco C5, Campo Grande
| \|uno | \|eves Fax: +351 21 7500084 1700 Lisboa, Portugal
------------------------------------------------------- The SF.Net email is sponsored by EclipseCon 2004 Premiere Conference on Open Tools Development and Integration See the breadth of Eclipse activity. February 3-5 in Anaheim, CA. http://www.eclipsecon.org/osdn _______________________________________________ Openca-Users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/openca-users
