Creating a CSR with multiple SAN options

By alc posted Aug 21, 2013 05:20 PM

  

Question

Is it possible to put multiple entries into the SAN field when generating a CSR? I tried entering "DNS:clearpass1.mydomain.org, IP:10.20.100.170" and it threw an error. I'm not sure what the delimiter is between the various SAN entries.

 

I'm trying to create a CSR for a VIP that references the publisher and subscriber IPs and FQDNs. I've been told this is the best way to handle certs in CPPM in case of a failover and / or the promotion / demotion of Publishers and Subscribers.

Answer

I believe there are no spaces

 

DNS:cplab.clearpassdemo.com,IP:10.80.2.200

 

 

0 comments
0 views