Re: tls and ldap server dns alias ?

[Samuel Tran <stran@amnh.org>]

On Fri, 2005-05-20 at 09:01, FM wrote:
> Hello,
> is it possible to use dns alias for openldap server when using tls ?
> ex :
> server1 with dns alias ldap1
> create a cert for ldap1 instead of server 1 ?
> 
> 
> If not, perhaps I can add a virtual ip address for ldap1 and then force 
> openldap to be bind with this ip address only ?

Hi,

You can create a cert for both server1 and ldap1 by using X509v3 Subject
Alternative Name. No need of additional IP address.

Sam

Attachment: signature.asc
Description: This is a digitally signed message part