[CentOS] SSL: Server CommonName mismatch: localhost.localdomain

On Tue, 13 Jun 2006, M. Fioretti wrote:

> Right now I am rebuilding a new certificate on the server, byt I am 
> setting my.vps.fqdn.name in openssl.cnf as CommonName_default and 
> running the provided CA Perl Script. This would have the same effect 
> as your command line option below, wouldn't it?
>
>> You'll probably want to build a new cert, specifying the CN as the 
>> public hostname of your IMAP server, e.g.,
>>
>>   openssl req \
>>     -x509 -nodes -days 365 \
>>     -subj '/C=IT/L=Roma/CN=my.vps.fqdn.name' \
>>     -newkey rsa:1024 -keyout mycert.pem -out mycert.pem

Yes, it should.

The nice thing about using the -subj option is that it allows you to 
skip all the interactive question/answer silliness.

-- 
Paul Heinlein <> heinlein at madboa.com <> www.madboa.com