Netscape (other browsers too?) tries to match the certificate's Common Name to
the host name. If it doesn't match, it gives you the message you described.
Set the Common Name of your server's certificate to 'blah.mankato.msus.edu'
and it should work. You can use asterixes to do crude pattern matching - i.e.
'*.mankato.msus.edu' will match blah or anything else in the
'mankato.msus.edu' domain.
- Kris Peterson
Jeffrey Hundstad wrote:
> Hello,
>
> I've just subscribed to this list... so forgive this *possibly* stupid
> question. I've read the faq and it doesn't seem to answer this
> question. I've just set up a ssleah-apache server and created a key
> with 'make certificate'. I copied the key file and the symbolic link
> hash name to the configuration area suggested.... Here's the problem...
> When I point netscape 4.xx (linux) at my new https:// area it says the
> cert. is new and has me verify that i want to use it.... so far so
> good. As soon as I'm finished with the verification the first page
> that is read gives the attached warning.
>
> Question: Why is my host 'blah.mankato.msus.edu' not recognized as the
> valid key holder. I don't remember the host as a query when i answered
> the questions from make certificate. HELP?
>
> ----start----
>
> The certificate that the site 'blah.mankato.msus.edu' has presented does
> not contain the correct site name. It is possible, though unlikely, that
> someone may be trying to intercept your communication with this site. If
> you suspect the certificate shown below does not belong to the site you
> are connecting with, please cancel the connection and notify the site
> administrator.
>
> Here is the Certificate that is being presented:
>
> Certificate for:
> Signed by:
> Encryption:
> Mankato State University
> Mankato State University
> Export Grade (RC4-Export with 40-bit secret key)
>
> This Certificate belongs to:
> Jeffrey Hundstad
> [EMAIL PROTECTED]
> Computer Services
> Mankato State University
> Mankato, Minnesota, US
>
> <MORE INFO>
>
> This Certificate was issued by:
> Jeffrey Hundstad
> [EMAIL PROTECTED]
> Computer Services
> Mankato State University
> Mankato, Minnesota, US
>
> Serial Number: 00
> This Certificate is valid from Tue Mar 31, 1998 to Thu Apr 30, 1998
> Certificate Fingerprint:
> A9:F5:E4:73:AB:3D:FB:0C:71:83:64:25:B8:C8:60:38
>
> ---end---
>
> +-------------------------------------------------------------------------+
> | Administrative requests should be sent to [EMAIL PROTECTED] |
> | List service provided by Open Software Associates, http://www.osa.com/ |
> +-------------------------------------------------------------------------+
+-------------------------------------------------------------------------+
| Administrative requests should be sent to [EMAIL PROTECTED] |
| List service provided by Open Software Associates, http://www.osa.com/ |
+-------------------------------------------------------------------------+
