[Freeipa-users] Use of SAN's with automatic certificates in FreeIPA 4

Dmitri Pal dpal at redhat.com
Fri Sep 12 11:12:50 UTC 2014


On 09/11/2014 09:25 PM, Michael Lasevich wrote:
> If I remember correctly, you could not use SAN (Subject Alternate 
> Names) for certificates in FreeIPA 3.0 - is this still the case with 4?

https://fedorahosted.org/freeipa/ticket/3977 < 4.0 is able.

>
> I have hosts that automatically receive two hostnames, a long proper 
> name (like "service-i-12345678") and a simpler cname based on an index 
> for ease of access (like "service-1") - however since OS hostname is 
> the "proper" one, certs would typically be issued to that name. I want 
> my users to be able to hit it via the simplex "index" names. Is that 
> currently possible (esp given that the cnames are actualy in a 
> different DNS domain)?
>
> Thanks,
>
> -M
>
>


-- 
Thank you,
Dmitri Pal

Sr. Engineering Manager IdM portfolio
Red Hat, Inc.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20140912/8faa59bc/attachment.htm>


More information about the Freeipa-users mailing list