Problems creating a valid certificate request

HCL Domino Domino Forum
1

Hi!

We are using an external CA to sign server certificates, so I importet the CA files to the keyring using certsrv.nsf. Then I wanted to create a cert request, which lead to 2 problems:

  1. Domino uses the server title from the server document as “Common Name”. This is wrong because the common name should be the internet hostname. With the server title the browser complains that hostname and common name don’t match.

How do I solve this problem? Can I change the server title to the internet hostname without problems?

  1. Our company has the character “&” in the title. This character was entered during the installation. Now it will be displayed as part of the organization name in the cert request. But I was told by our security admin that “&” is not a valid character in this field. So openssl normally refuses to sign the cert request.

How do I solve this problem? I don’t seem to be able to change the organization name after the installation. Domino should refuse invalid characters during the installation.

I would prefer if I could import my handmade certificate (made with openssl), but I can’t import a private key.

Thanks for your help and advice.

Shade and sweet water!

Stephan

2

Subject: Problems creating a valid certificate request

Stephen,

  1. Domino uses the server title from the server document as “Common Name”. This is wrong because the common >name should be the internet hostname. With the server title the browser complains that hostname and common name >don’t match.

  • did you create a keyring file using certsrv.nsf ? during creation of the keyring file, you have to specify the server name. You can put the email internet hostname as CN.

  • then you request certificate request, the CN should contain the hostname you specified above

  1. Our company has the character “&” in the title. This character was entered during the installation. Now it will be >displayed as part of the organization name in the cert request. But I was told by our security admin that “&” is not a >valid character in this field. So openssl normally refuses to sign the cert request.
  • Not sure what do you mean here as having & in the title. What title do you mean ?

Hope this help,

ShiuFun