up vote 2 down vote favorite
1
share [g+] share [fb]

I'm running a server "myserver.net", which has the subdomains "a.myserver.net" and "b.myserver.net".

When creating (self-signed) SSL certificates, I have to create one for every subdomain, containing the FQDN, even though those subdomains are just vhosts.

OpenSSL permits only one "common name", which is the domain in question. Is there any possibility to create a certificate that is valid for all subdomains of a domain?

link|improve this question
40% accept rate
feedback

1 Answer

up vote 2 down vote

Yes, use *.myserver.net as common name.

This is called wildcard certs and there are large number of howtos finding with this keyword.

Here is one of them: http://www.justinsamuel.com/2006/03/11/howto-create-a-self-signed-wildcard-ssl-certificate/

Update: if you want cert to match root domain as well (myserver.net), then you should use Subject Alternative Name extension. When generating cert using openssh enter '*.myserver.net/CN=myserver.net' as Common Name.

Compatibly is good enough, unless you have an ancient browser.

link|improve this answer
Ok, but is the certificate valid for the root-domain ("myserver.net") as well, or just for all subdomains? – polemon Apr 6 '11 at 7:40
No, but you could add Subject Alternative Name: use '*.myserver.net/CN=myserver.net' as common.name. See here: artins.org/ben/… and here: digicert.com/subject-alternative-name-compatibility.htm – rvs Apr 6 '11 at 11:32
feedback

Your Answer

 
or
required, but never shown
discard

Not the answer you're looking for? Browse other questions tagged or ask your own question.