Hello,
Our test network does not have a DNS - we access the machines by their
IP addresses.
One of the servers needs to provide HTTPS connectivity so I generated a
certificate for it using the IP address as the Common Name.
The problem is that Hostname Verification ( or at least the default Sun
Java implementation ) seems to automatically fail if the host name is
an IP address - even if it matches the Common Name in the certificate.
I would rather not have to set up all the clients in the test network
to use
custom host name verifiers, or turn hostname verification off either,
since this
means getting further away from a 'production like' environment.
Is there any other way around this?
cheers
Perryn
Chuck Simpson - 25 Mar 2005 20:03 GMT
> Hello,
>
[quoted text clipped - 18 lines]
> cheers
> Perryn
You do not need DNS, create a host file on the servers and clients that
contains the hostnames of the servers on your test network. Then create
the certificate using the server hostname as the CN.
Chuck
Mr. Skeptic - 26 Mar 2005 04:41 GMT
well, that must have been a nasty surprise. Have you tried putting the
IP address in the subjectAltName extension?