Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Everywhere I read says to have the server hostname in the commonName field and the subjectAltName field. The problem is that the hostname that I want to sign has greater than 64 characters. Therefore, the hostname wont fix in that field. I have seen sites such as this which even say that it is a security vulnerability not to have the hostname as the commonName. How should I do this?

share|improve this question
add comment

2 Answers

Check this RFC:

This previous questions at stackoverflow:

As for a workaround, you can set a short CNAME entry in your DNS.

share|improve this answer
    
That wont work: the reason being that the hostname is a sha2 hash, I cant shorten it without losing meaning. –  chacham15 Apr 14 '13 at 8:42
add comment
up vote 0 down vote accepted

THe answer is that the cname is only an alternate. The cname and the san dont have to match.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.