[ILUG] Openssl with RH6.2 Secure Server

[Sean]

adam beecher wrote something:
{ Ronan,
{ 
{ OpenSSL prompts (or used to prompt) for a Common Name, not a Server Host
{ Name. Did it? If so, just stick the host name in there.

  This 'Common Name' can be anything, openssl even says (eg, YOUR name).
  Requests don't depend on hostnames since you may be moving the cert
  from one machine to another.  Openssl does generate proper requests.
  Well apache/whatever accepts the certs anyways..

Sean.
.
{ 
{ adam
{ 
{ 
{ > -----Original Message-----
{ > From: ilug-admin at linux.ie [mailto:ilug-admin at linux.ie]On Behalf Of Ronan
{ > Kirby
{ > Sent: 24 April 2000 21:26
{ > To: ilug at linux.ie
{ > Subject: [ILUG] Openssl with RH6.2 Secure Server
{ >
{ >
{ > Folks,
{ >
{ > Anyone else come across this?
{ >
{ > When you follow the instructions to generate a certificate request in
{ > the Red Hat 6.2 Secure Server documentation, there seems to be a
{ > problem. As instructed, you run the following command...
{ >
{ > /usr/bin/openssl req -new -key /etc/httpd/conf/server.key -out
{ > /etc/httpd/conf/server.csr
{ >
{ > ...and it prompts you for various inputs. According the the RH
{ > documentation one of the things it should ask you for is "Server Host
{ > Name[]:", but it doesn't actually ask you when you run the above
{ > command.
{ >
{ > This then causes a problem when you go to your CA and submit the
{ > certificate. The CA won't process the cert as it reports a bad host
{ > name. But of course you cannot supply a valid host name as the software
{ > doesn't ask you for one when it is being run. Which according to the RH
{ > docs, it should!
{ >
{ > Any help or advice would me much appreciated!
{ >
{ > Thanks,
{ >
{ > Ronan
{ >
{ > --
{ > Irish Linux Users' Group: ilug at linux.ie
{ > http://www.linux.ie/mailman/listinfo/ilug for (un)subscription
{ > information.
{ > List maintainer: listmaster at linux.ie
{ >
{ 
{ 
{ -- 
{ Irish Linux Users' Group: ilug at linux.ie
{ http://www.linux.ie/mailman/listinfo/ilug for (un)subscription information.
{ List maintainer: listmaster at linux.ie