[time-nuts] febo.com SSL certificate

[John Ackermann N8UR]

Thanks, Bob.  I'll see if I can regenerate it.  The OpenSSL script doesn't prompt for a alternate name, so I'm not sure just how to get that field into it, but I'll mess around a bit.

John
----

On Oct 15, 2010, at 9:36 PM, Bob Camp <lists at rtty.us> wrote:

> Hi
> 
> https://febo.com returns "This certificate is not valid (host name mismatch)" under Safari 
> 
> Apparently  by the bizarre rules of ssl wildcards - *.febo.com does not match feebo.com. I believe  febo.com goes in the SubjectAltName field and *.febo.com stays in the CommonName field. 
> 
> Very strange stuff.
> 
> Bob
> 
> 
> On Oct 15, 2010, at 9:20 PM, John Ackermann N8UR wrote:
> 
>> I've regenerated the SSL certificate for HTTPS at febo.com.  The new certificate should be good for ten years, as I intended (but failed to accomplish) when I created the old one.  It's still a self-signed cert, so will throw a warning with your browser, but you can trust me and tell the browser to accept the exception. :-)
>> 
>> I'm traveling over the weekend so won't be able to address any problems, but if anyone has problems I'll do the best I can to respond early next week.
>> 
>> BTW -- because this is a totally non-commercial site, I'm not interested in forking over the money to buy a trusted certificate, not to mention the hassle of having to renew it.  Sorry if the security warning is an annoyance, but that's the way it is.
>> 
>> John
>> 
>> _______________________________________________
>> time-nuts mailing list -- time-nuts at febo.com
>> To unsubscribe, go to https://www.febo.com/cgi-bin/mailman/listinfo/time-nuts
>> and follow the instructions there.
> 
> 
> _______________________________________________
> time-nuts mailing list -- time-nuts at febo.com
> To unsubscribe, go to https://www.febo.com/cgi-bin/mailman/listinfo/time-nuts
> and follow the instructions there.