Results 1 to 2 of 2

Thread: Howto create certificate for server with multiple names

  1. #1
    Join Date
    Jul 2007
    Location
    Brazil
    Posts
    55
    Rep Power
    8

    Question Howto create certificate for server with multiple names

    Hi All,

    My server has two names:
    1- mailhost.mydomain.br (for general purpouse)
    2- webmail.mydomain.br (for web clients)

    What is the best praticies to generate the csr certificate in this case? I am going to use CACert.
    Should I use "common name" equal webmail.mydomain.br and "subjectAltNames" equal mailhost.mydomain.br or vice-versa?

    If I use only one name in subjectAltNames my csr certificate there isn't SubjectAltName.
    Look the command bellow.

    [root@mailhost commercial]# /opt/zimbra/bin/zmcertmgr createcsr comm -new "/C=BR/ST=Rio de Janeiro/L=Rio de Janeiro/O=My Company/OU=My Depart/CN=webmail.mydomain.br" -subjectAltNames "mailhost.mydomain.br"
    ...
    [root@mailhost commercial]# /opt/zimbra/bin/zmcertmgr viewcsr comm commercial.csr
    subject=/C=BR/ST=Rio de Janeiro/L=Rio de Janeiro/O=My Company/OU=My Depart/CN=webmail.mydomain.br
    SubjectAltName=
    This also happen if I use the Administration Console.

    But if I use more than one in SubjectAltName it works.

    [root@mailhost commercial]# /opt/zimbra/bin/zmcertmgr createcsr comm -new "/C=BR/ST=Rio de Janeiro/L=Rio de Janeiro/O=My Company/OU=My Depart/CN=webmail.mydomain.br" -subjectAltNames "mailhost.mydomain.br,mail.mydomain.br"
    ...
    [root@mailhost commercial]# /opt/zimbra/bin/zmcertmgr viewcsr comm commercial.csr
    subject=/C=BR/ST=Rio de Janeiro/L=Rio de Janeiro/O=My Company/OU=My Depart/CN=webmail.mydomain.br
    SubjectAltName= mailhost.mydomain.br, mail.mydomain.br

    What should I do?

    Best regards,
    Bibo

  2. #2
    Join Date
    Aug 2008
    Posts
    15
    Rep Power
    7

    Default

    I also experience this issue when creating new certificates with alternate names. Why not file a bug?

Similar Threads

  1. Replies: 6
    Last Post: 11-09-2009, 08:39 PM
  2. Certificate issues - multiple certificates
    By jwf6911 in forum Administrators
    Replies: 0
    Last Post: 05-12-2008, 11:21 AM
  3. Replies: 5
    Last Post: 03-18-2008, 01:26 PM
  4. 5.01 GA Create certificate ?
    By woeper in forum Installation
    Replies: 1
    Last Post: 01-25-2008, 12:05 AM
  5. Replies: 1
    Last Post: 11-05-2007, 06:55 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •