Re: END of maintenance

On 7/20/21 3:27 AM, Aioe wrote:
> innd is an obsolete server program that does not allow to use more than 
> a single ssl certificate.

Do you /need/ more than one certificate?

Can you put the all of the names in the Subject Alternative Name field 
of the certificate?

TLS standards for the contemporary web* have deprecated the Common Name 
field and instead rely entirely on the Subject Alternative Name field. 
As such I put the hosts canonical name (usually what's returned by 
hostname -f) in the CN field and all names, including the canonical 
name, in the SAN field.

*Yes, I realize that news is not the web.  However, many TLS libraries 
are following the web.



-- 
Grant. . . .
unix || die