I've never tried with MSIE. We had enough trouble getting the 3.0 version
to accept certificates and have had sporadic problems with 4.0. Right
now, we're only supporting Netscape clients against our secure servers.
Anyone tried MSIE with these kind of common name entries?
Wyman
On Thu, 7 May 1998, Marc Slemko wrote:
> On Thu, 7 May 1998, Wyman Eric Miles wrote:
>
> >
> > This is documented on Netscape's technical support site. Basically, the
> > client compares the common name given in the certificate to the URL. If
> > the two don't match, you get that error. For example:
> >
> > Our test server is pecos.is.rice.edu and I (oops) created a certificate
> > with a CN of "Rice University" and received that error. If I create a
> > certificate with a CN of "(pecos.is.rice.edu|pecos.is|pecos)" I'm covered
>
> Does this work with MSIE?
>
> Last I knew wildcards didn't, not sure about other regexes...
>
> > for any way visitors can come to the site and they shouldn't receive that
> > error message; https://pecos or https://pecos.is or
> > https://pecos.is.rice.edu
> >
> > You can either use common names like the above that are a series of values
> > OR'd inside parenthesis or just give the name of the site as it should be
> > accessed: "ruf.rice.edu"
> >
> > Wyman
> >
> >
> > On Thu, 7 May 1998, Steven Bolbot wrote:
> >
> > > Well I finally got the server up and running :)
> > > One question I do have though: When I connect with a web browser (in this
> > > case Netscape) it displays this:
> > > The certificate that the site 'storm.lightning.tne.net.au' has presented does
> > > not contain the correct site name. It is possible, though unlikely, that
> > > someone may be trying to intercept your communication with this site. If you
> > > suspect the certificate shown below does not belong to the site you are
> > > connecting with, please cancel the connection and notify the site
> > > administrator.
> > >
> > > Exactly where do I put the site name so this error message doesn't come up?
> > >
> > > Thanks
> > > - SB
> > > ________________________________________________________________________
> > >
> > > \ |_) | Steven Bolbot
> > > |\/ | | __ \ _ \ __| _` | | | __| sjb@tne.net.au
> > > | | | | | ( | | ( | | | | ICQ: 1221679
> > > _| _|_|_| _|\___/ \__|\__,_|\__,_|_| http://Minotaur.home.ml.org
> > >
> > > Go to
> > > <http://minotaur.home.ml.org/sjb.asc>http://Minotaur.home.ml.org/sjb.asc
> > > for my
> > > PGP Public Key.
> > > ========================================================================
> > > Out of the token ring, through the router, to the t1, down the fiber, over the
> > > cable, through a
> > > repeater, off another router, past the firewall...Nothing but
> > > net!
> > >
> >
> > Wyman Miles
> > Systems Administrator, Systems and LAN Management, Rice University, Texas.
> > (713) 737-5827, e-mail:wymanm@rice.edu, pager:wymanm@pager.rice.edu
> > SalMoN AntiSpam software for UNIX: http://is.rice.edu/~wymanm/smn
> >
>
>
Wyman Miles
Systems Administrator, Systems and LAN Management, Rice University, Texas.
(713) 737-5827, e-mail:wymanm@rice.edu, pager:wymanm@pager.rice.edu
SalMoN AntiSpam software for UNIX: http://is.rice.edu/~wymanm/smn