All, I came up with a workaround, however, I wanted to double check that it was OK.
I added a same as parent A record (sipx.sunyulster.edu) and set it to the IP address of the sever. This allows web-access to the web interface using sipx.sunyulster.edu instead of using the FQDN ecs1.sipx.sunyulster.edu. This allows our wildcard *.sunyulster.edu to be used without any errors. I just want to make sure that create the A record would cause any issues. Thanks, Jes On Thu, Feb 16, 2012 at 4:56 PM, Becker, Jesse <[email protected]>wrote: > All, > I was able to follow the manual instructions. Do wild card certificates > not cover sub zone/domains? Our wildcard is for *.sunyulster.edu. Our > SipX Server is ecs1.sipx.sunyulster.edu (sipx.sunyulster.edu being the > domain). I am getting the following error from the browser: > > You attempted to reach *ecs1.sipx.sunyulster.edu*, but instead you > actually reached a server identifying itself as **.sunyulster.edu*. This > may be caused by a misconfiguration on the server or by something more > serious. An attacker on your network could be trying to get you to visit a > fake (and potentially harmful) version of *ecs1.sipx.sunyulster.edu*. You > should not proceed. > > Thanks, > > Jes > > On Thu, Feb 16, 2012 at 4:47 PM, Becker, Jesse <[email protected]>wrote: > >> I will look into the manual install instructions. Is there something that >> I should backup, ie, existing keystore before doing so? Or do I simply >> recovery by re-running the self-sign create your own certificate >> instructions? >> >> Thanks, >> >> Jes >> >> On Wed, Feb 15, 2012 at 9:05 PM, Dustin Roberts < >> [email protected]> wrote: >> >>> Jesse, >>> >>> >>> >>> I was able to do it by following this forum thread: >>> http://forum.sipfoundry.org/index.php?t=msg&goto=64090&S=c7bc9a86fe683cb13b53ec69f7e72e25 >>> >>> >>> >>> Dustin Roberts >>> Technical Support Specialist >>> Caldwell School District #132 >>> [email protected] >>> (208) 455-4463 x1307 >>> >>> >>> >>> *From:* [email protected] [mailto: >>> [email protected]] *On Behalf Of *Becker, Jesse >>> *Sent:* Wednesday, February 15, 2012 6:54 PM >>> *To:* Discussion list for users of sipXecs software >>> *Subject:* [sipx-users] Importing Wildcard Cert >>> >>> >>> >>> All, >>> >>> Is it possible to import a wildcard certificate into sipxecs 4.4? We >>> have a wildcard certificate that we are using on all our Apache2 and ISS >>> system. I have the server.key and certificate. I also have the >>> gd_bundle.crt (intermediate) from GoDaddy. I tried importing the key and >>> cert through the web interface, however, it said it could not be validated. >>> I also tried importing gd_bundle.crt into CA and it also said it could be >>> validated. Lastly, I tried combining the server cert and ca cert into one >>> file (commonly required by glassfish, tomcat, and nginx). This caused the >>> same error. Will it be possible to import the wildcard or will I have to >>> get a dedicated crt for this system? >>> >>> >>> >>> Thanks, >>> >>> >>> >>> Jes >>> >>> >>> >>> -- >>> >>> Jesse Becker | Technical Manager >>> Network+ | Linux+ Certified Professional >>> DATATEL+SGHE @ SUNY Ulster >>> 491 Cottekill Road, Stone Ridge, NY 12484 >>> Tel 845-687-5064 | Fax 845-687-5105 >>> [email protected] | www.sunyulster.edu >>> >>> Check out our knowledge base: >>> http://kb.sunyulster.edu<http://kb.sunyulster.edu/> >>> >>> >>> >>> _______________________________________________ >>> sipx-users mailing list >>> [email protected] >>> List Archive: http://list.sipfoundry.org/archive/sipx-users/ >>> >> >> >> >> -- >> >> >> Jesse Becker | Technical Manager >> Network+ | Linux+ Certified Professional >> DATATEL+SGHE @ SUNY Ulster >> 491 Cottekill Road, Stone Ridge, NY 12484 >> Tel 845-687-5064 | Fax 845-687-5105 >> [email protected] | www.sunyulster.edu >> >> <http://www.sunyulster.edu/> >> >> Check out our knowledge base: >> http://kb.sunyulster.edu<http://kb.sunyulster.edu/> >> >> >> > > > -- > > > Jesse Becker | Technical Manager > Network+ | Linux+ Certified Professional > DATATEL+SGHE @ SUNY Ulster > 491 Cottekill Road, Stone Ridge, NY 12484 > Tel 845-687-5064 | Fax 845-687-5105 > [email protected] | www.sunyulster.edu > > <http://www.sunyulster.edu/> > > Check out our knowledge base: > http://kb.sunyulster.edu<http://kb.sunyulster.edu/> > > > -- Jesse Becker | Technical Manager Network+ | Linux+ Certified Professional DATATEL+SGHE @ SUNY Ulster 491 Cottekill Road, Stone Ridge, NY 12484 Tel 845-687-5064 | Fax 845-687-5105 [email protected] | www.sunyulster.edu <http://www.sunyulster.edu/> Check out our knowledge base: http://kb.sunyulster.edu<http://kb.sunyulster.edu/>
_______________________________________________ sipx-users mailing list [email protected] List Archive: http://list.sipfoundry.org/archive/sipx-users/
