[Fedora-directory-users] problem with SSL and load balance

[Victor Hugo dos Santos]

2007/10/3, Enrico M. V. Fasanelli <Enrico.M.V.Fasanelli at le.infn.it>:
> Hi Victor,
>
> have you tried with a certificate that contains the alternate name of
> the server?
>
> Something like
> X509v3 Subject Alternative Name: DNS:fds.mydomain.com,
> DNS:fds1.mydomain.com

yes .... apparent that Subject Alternative Name (SubjectAltName) is
the best solution for this problem !!!!

but, i have one other problem !!! :-)

my certificates (all) is signed for cacert.org .. and in the
Certificate Wizard in the DS Console, I don't look one field for
SubjectAltName.. and in ShowDN option I write:

CN="fds.multi.com",SubjectAltName=""DNS:fds.multi.com"",SubjectAltName=""DNS:fds2.multi.com""

/CN="fds.multi.com"/SubjectAltName=""DNS:fds.multi.com""/SubjectAltName=""DNS:fds2.multi.com""/

and others, but in the step 4/4 I receive this error:

-------------------------------------------------------
Unable to convert DN to certificate name.

-----BEGIN NEW CERTIFICATE REQUEST-----
-------------------------------------------------------

in the internet i read various howtos, manual and others that show how
usage the certuil for create certificates with SubjectAltName, but it
alone work with/for self-signed certificates !!!

http://www.redhat.com/docs/manuals/dir-server/ag/7.1/ssl.html#1085091
http://directory.fedoraproject.org/wiki/Howto:SSL#Using_Subject_Alt_Name

and I run this command:

openssl genrsa -out slapd-fds2-key3.db 2048
openssl req -new -key slapd-fds2-key3.db -out vhs.csr -subj
'CN=fds.multi.com/subjectAltName=DNS:fds.multi.com/subjectAltName=DNS:fds2.multi.com'

and work fine... i get one certificate request with all fields and
send for my CA (cacert.org)  and I receive the certificate signed with
all fields, but i dont how install it for CLI !!! for the wizard I
receive one other error "this key not found - this certificate is
generate in the server ???"

any solution ???

-- 
-- 
Victor Hugo dos Santos
Linux Counter #224399