[Date Prev][Date Next] [Chronological] [Thread] [Top]

Antwort: Re: SSL certificates, kerberos keytabs, and load balancing [Virus checked]

To: Michael Ströder <michael@stroeder.com>
Subject: Antwort: Re: SSL certificates, kerberos keytabs, and load balancing [Virus checked]
From: denis.havlik@t-mobile.at
Date: Tue, 13 Apr 2004 13:10:19 +0200
Cc: openldap-software@OpenLDAP.org, owner-openldap-software@OpenLDAP.org

>> >commonName=ldap1.example.com
>> >subjectAltName=commonName: ldap.example.com

>You should test whether all your SSL/TLS-enabled LDAP applications really
>look at subjectAltName extension!

Does this mean:

A) Most applications will work OK, but it's still possible that some are broken.

or

B) Setting "subjectAltName=commonName: <service cluster FQN>" should teoretically solve the problem, but the reality is different and many client apps don't know it.

regards
Denis

Follow-Ups:
- Re: SSL certificates, kerberos keytabs, and load balancing [Virus checked]
  - From: Michael Ströder <michael@stroeder.com>

Prev by Date: Antwort: Re: SSL certificates, kerberos keytabs, and load balancing [Virus checked]
Next by Date: Re: SSL certificates, kerberos keytabs, and load balancing [Virus checked]
Index(es):
- Chronological
- Thread