<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">On 09/11/2014 09:25 PM, Michael
Lasevich wrote:<br>
</div>
<blockquote
cite="mid:CAAFs98W+cSzeUMDHabe1ZTVFuV-=iDZ2h0KGpRyRifTPAumgJw@mail.gmail.com"
type="cite">
<div dir="ltr">
<div>
<div>
<div>If I remember correctly, you could not use SAN (Subject
Alternate Names) for certificates in FreeIPA 3.0 - is this
still the case with 4?<br>
</div>
</div>
</div>
</div>
</blockquote>
<br>
<a class="moz-txt-link-freetext" href="https://fedorahosted.org/freeipa/ticket/3977">https://fedorahosted.org/freeipa/ticket/3977</a> < 4.0 is able.<br>
<br>
<blockquote
cite="mid:CAAFs98W+cSzeUMDHabe1ZTVFuV-=iDZ2h0KGpRyRifTPAumgJw@mail.gmail.com"
type="cite">
<div dir="ltr">
<div>
<div>
<div><br>
</div>
I have hosts that automatically receive two hostnames, a
long proper name (like "service-i-12345678") and a simpler
cname based on an index for ease of access (like
"service-1") - however since OS hostname is the "proper"
one, certs would typically be issued to that name. I want my
users to be able to hit it via the simplex "index" names. Is
that currently possible (esp given that the cnames are
actualy in a different DNS domain)?<br>
<br>
</div>
Thanks,<br>
<br>
</div>
-M<br>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
</blockquote>
<br>
<br>
<pre class="moz-signature" cols="72">--
Thank you,
Dmitri Pal
Sr. Engineering Manager IdM portfolio
Red Hat, Inc.</pre>
</body>
</html>