Re: Multi-domain security certificate

Right, you need to request a wildcard cert. This is not strictly
considered multi-domain because all of the hostnames are related to the
same "root".

However, note that *.foo.com works for im.foo.com and chat.foo.com and
so on, but *not* for bar1.im.foo.com and bar2.im.foo.com (according to
the cert-matching rules in RFC 3920).

Peter

David Banes wrote:
> Hi Thomas,
> 
> You need to get a wildcard certificate for 'foo.com'.
> 
> regards,
> 
> David.
> 
> 
> On 22/01/2009, at 11:08 AM, Thomas Arnoux wrote:
> 
>> Hi again,
>>
>> Is my question unclear in any way? Since I want to secure my server in
>> the best possible way, I would really appreciate if someone could help
>> me here.
>>
>> Thanks in advance.
>>
>> On Mon, 2009-01-19 at 23:47 +0100, Thomas Arnoux wrote:
>>> I am going to create an XMPP security certificate at Startcom, but I
>>> have a few questions first.
>>>
>>> My server is using dns im.foo.com, my MUC component is on  
>>> muc.foo.com,
>>> and various other components are on bar1.im.foo.com, bar2.im.foo.com,
>>> etc. (msn, irc, pubsub, vjud, etc.)
>>>
>>> How should I deal with the security certificate? Is a certificate for
>>> im.foo.com enough, or should I ask for one containing all necessary
>>> domain names (and in this case, which components need to be  
>>> included in
>>> the certificate)?
>> -- 
>> Thomas Arnoux <[email protected]>
>> _______________________________________________
>> JAdmin mailing list
>> FAQ: http://www.jabber.org/discussion-lists/jadmin-faq
>> Forum: http://www.jabberforum.org/forumdisplay.php?f=19
>> Info: http://mail.jabber.org/mailman/listinfo/jadmin
>> Unsubscribe: [email protected]
>> _______________________________________________
> 
> 
> --------------------------------------------------------------------------------------------------------
> Email Filtering by Cleartext a Carbon Minimised company - www.cleartext.com
> --------------------------------------------------------------------------------------------------------
> _______________________________________________
> JAdmin mailing list
> FAQ: http://www.jabber.org/discussion-lists/jadmin-faq
> Forum: http://www.jabberforum.org/forumdisplay.php?f=19
> Info: http://mail.jabber.org/mailman/listinfo/jadmin
> Unsubscribe: [email protected]
> _______________________________________________

_______________________________________________
JAdmin mailing list
FAQ: http://www.jabber.org/discussion-lists/jadmin-faq
Forum: http://www.jabberforum.org/forumdisplay.php?f=19
Info: http://mail.jabber.org/mailman/listinfo/jadmin
Unsubscribe: [email protected]
_______________________________________________