[prev in list] [next in list] [prev in thread] [next in thread] 

List:       openssl-users
Subject:    Re: multiple host names in a certificate.
From:       Richard Levitte - VMS Whacker <levitte () stacken ! kth ! se>
Date:       2000-07-31 12:48:18
[Download RAW message or body]

From: Oscar Jacobsson <oscar.jacobsson@celocom.com>

oscar.jacobsson> Unfortunately, RFC 2459 does not seem to allow for
oscar.jacobsson> all that much in the way of backwards compatibility:

Absolutely true.  Now we just have to wait for all implementations
to catch up, which I believe will be slow (from experiences with other
standardisation efforts like this).

Of course, you can always wave a paw and go "Bah!" at such
implementations.  However, I dunno how constructive that would be
:-).

oscar.jacobsson> As for using multiple common names, if we step
oscar.jacobsson> outside the realm of PKIX for now, I can't see
oscar.jacobsson> anything that would disallow simply including
oscar.jacobsson> multiple common names into the subject name.

Me neither.  Come to think of it (after a bit of verification in RFC
2459), I'm not even sure you have to step outisde of the PKIX realm,
or?

oscar.jacobsson> > Oscar, I can show you a certificate that will make
oscar.jacobsson> > you scream :-). 
oscar.jacobsson> 
oscar.jacobsson> I'm not questioning your ability, merely your motives... ;-)

The motive was included in the sentence given. :-)

-- 
Richard Levitte   \ Spannvägen 38, II \ LeViMS@stacken.kth.se
Chairman@Stacken   \ S-168 35  BROMMA  \ T: +46-8-26 52 47
Redakteur@Stacken   \      SWEDEN       \ or +46-709-50 36 10
Procurator Odiosus Ex Infernis                -- poei@bofh.se
Member of the OpenSSL development team: http://www.openssl.org/
Software Engineer, Celo Communications: http://www.celocom.com/

Unsolicited commercial email is subject to an archival fee of $400.
See <http://www.stacken.kth.se/~levitte/mail/> for more info.
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           majordomo@openssl.org

[prev in list] [next in list] [prev in thread] [next in thread]