[389-users] certificate with subjectAltName

[Rich Megginson]

muzzol wrote:
> hi,
>
> i've created a cert request with "-8" parameter (subjectAltName),
> signed with my own openssl CA and installed on a 389 node.
>
> when i perform an ldapsearch with TLS (-ZZ) i get
>   
Did you specify the FQDN with the -h argument?  What hostname did you 
give?  The real hostname or the subjectAltName?
>   TLS: hostname (ldap.example.com) does not match common name in
> certificate (node1.example.com).
>
> i've double checked all steps but no success.
>
> any advice?
>
> regards.
>
>