> we tried to create a ssl certification via openssl. > Our problem is that we have in intern server called SVR02. This server > could be reached via name.dyndns.org:443. If we create a certification > with the CO SVR02 the server accept this and install the certification. > But if we try it from www the reaction is that there is a non-trusting > certification course we called by name.dyndns.org. If we change the CO > to name.dyndns.org the certification is non-trusting by the server at all.
> Is there a chance to create a certification on the intern server called > by the extern https://name.dyndns.org adress ? > Tobias Semmet You have a lot of choices, but no particularly good ones. In my opinion, your best option is to register your own domain name, CNAME it to your dyndns.org address, and obtain your own certificate in the name of your own domain. You could also ask the dyndns provider if they offer certificates. Since they own the name (as far as the certification authorities are concerned), they'd have to work with the CA to obtain the certificate. You can't do it because you can't prove to the CA that you own the host name you are using. Other options include creating your own certificate not issued by a CA and having people add an exception or providing them your own CA cert to install by other means. These are more difficult to get right and still keep the same level of security, so I don't recommend them. DS ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org