Theres actually a valid reason. The client pulls the redirection information out of the certificate Common Name. So if the CN is *.domain.com, it will try to redirect you to that and obviously fail.

I have never personally tried it where the SAN in the cert was the cas name, so I don't know if we can pull the name from there as well, but my instinct says probably not.

Nate

Rob Chee wrote:
Let us know if it works. That will be a good data point. I've never actually tried a wildcard cert, I just remember reading the documentation saying that it's not supported.

Rob

Emmanuel Joe wrote:
Hi Rob,
I'm looking the star_emmanuel.edu.crt file now it has the line
Subjet:
CN = *.emmanuel.edu
OU = Information Technology
O = Emmanuel College
L = Boston
S = Massachusetts
C = US

and the line
subjectAlternative Name :

DNS Name=cas.emmanuel.edu
DNS Name=emmanuel.edu
DNS Name=*.emmanuel.edu


Which if I'm not mistaken will work

Reply via email to