[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: N-Way-Multimaster Configuration

Borresen, John - 0442 - MITLL wrote:
> Thanks for your help with my last post.
> Now, the next task, will be setting up an N-way multimaster:
> Server1
> Server2
> Server3
> Server4
> Using TLS.  To create the certificates, finding a lot of varying ideas via google, what is the "best practice" to create certificates to where I don't have to touch each client if a server goes down.  Create a wildcard cert or use the subjectAltName in the openssl.cnf file?

Personally I' prefer to issue separate certs to each replica. I use the server
certs also as client cert for authenticating the replicas to each other with

Ciao, Michael.

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature