[time-nuts] febo.com SSL certificate

Bob Camp lists at rtty.us
Sat Oct 16 01:48:03 UTC 2010


Hi

Never done one with OpenSSL myself so I'm not much help there. 

One nice thing about self signed - no charge to regenerate a new key ....

Bob


On Oct 15, 2010, at 9:41 PM, John Ackermann N8UR wrote:

> Thanks, Bob.  I'll see if I can regenerate it.  The OpenSSL script doesn't prompt for a alternate name, so I'm not sure just how to get that field into it, but I'll mess around a bit.
> 
> John
> ----
> 
> On Oct 15, 2010, at 9:36 PM, Bob Camp <lists at rtty.us> wrote:
> 
>> Hi
>> 
>> https://febo.com returns "This certificate is not valid (host name mismatch)" under Safari 
>> 
>> Apparently  by the bizarre rules of ssl wildcards - *.febo.com does not match feebo.com. I believe  febo.com goes in the SubjectAltName field and *.febo.com stays in the CommonName field. 
>> 
>> Very strange stuff.
>> 
>> Bob
>> 
>> 
>> On Oct 15, 2010, at 9:20 PM, John Ackermann N8UR wrote:
>> 
>>> I've regenerated the SSL certificate for HTTPS at febo.com.  The new certificate should be good for ten years, as I intended (but failed to accomplish) when I created the old one.  It's still a self-signed cert, so will throw a warning with your browser, but you can trust me and tell the browser to accept the exception. :-)
>>> 
>>> I'm traveling over the weekend so won't be able to address any problems, but if anyone has problems I'll do the best I can to respond early next week.
>>> 
>>> BTW -- because this is a totally non-commercial site, I'm not interested in forking over the money to buy a trusted certificate, not to mention the hassle of having to renew it.  Sorry if the security warning is an annoyance, but that's the way it is.
>>> 
>>> John
>>> 
>>> _______________________________________________
>>> time-nuts mailing list -- time-nuts at febo.com
>>> To unsubscribe, go to https://www.febo.com/cgi-bin/mailman/listinfo/time-nuts
>>> and follow the instructions there.
>> 
>> 
>> _______________________________________________
>> time-nuts mailing list -- time-nuts at febo.com
>> To unsubscribe, go to https://www.febo.com/cgi-bin/mailman/listinfo/time-nuts
>> and follow the instructions there.
> 
> _______________________________________________
> time-nuts mailing list -- time-nuts at febo.com
> To unsubscribe, go to https://www.febo.com/cgi-bin/mailman/listinfo/time-nuts
> and follow the instructions there.




More information about the time-nuts mailing list