[Freeipa-users] nss unrecognized name alert with SAN name

[Rob Crittenden]

John Obaterspok wrote:
>
>
> 2016-06-27 11:05 GMT+02:00 Lukas Slebodnik <lslebodn at redhat.com
> <mailto:lslebodn at redhat.com>>:
>
>     On (26/06/16 20:37), John Obaterspok wrote:
>     >Hi,
>     >
>     >I've been running F23 + mod_nss 1.0.14-1 for months to get SubjectAltName
>     >to work.
>     >F24 update brings back mod_nss to 1.0.12-4 and now SubjectAltName doesn't
>     >work any more. Is there any chance 1.0.14 will make it in as an F24 update?
>     >(I can add karma if needed)
>     >
>     mod_nss-1.0.14-1 is only in rawhide (fc25)
>     I cannot see such package in fedora 23.
>
>     http://koji.fedoraproject.org/koji/packageinfo?packageID=2554
>
>
> Hi Lukas,
>
> When I ran F23 I installed mod_nss-1.0.14-1 from rawhide (fc25) in order
> to fix the problem with using SubjectAltName in certificate.
> I believe I manually installed 1.0.14 in april and this bug was fixed in
> 1.0.13 so that's why I was surprised F24 shipped with .12

I must have missed the fork and didn't notice. I'll update F24 with the 
latest release soon.

Note that mod_nss has its own mailing list, it isn't part of IPA, just 
used there.

rob