I want to create a CA for internal use in our office. I created the CA like the following:
openssl genrsa -out rootCA.key 2048 openssl genrsa -out rootCA.key 2048 -des3 openssl req -x509 -new -nodes -key rootCA.key -days 1024 -out rootCA.pem
Next I've imported the CA certificate on my OS X client and marked it as trustworthy and installed the CA cert in Firefox.
openssl genrsa -out device.key 2048 openssl req -new -key device.key -out device.csr
When filling the CA information I set the following: Common Name (eg, YOUR name) : 192.168.6.78
openssl x509 -req -in device.csr -CA root.pem -CAkey root.key -CAcreateserial -out device.crt -days 500
After that's done I've copied the cert and key file over to the Web server, installed it in nginx and tried to access the site with Chrome, Firefox and Safari
The result is that it's working fine in Chrome and Firefox, but not in Safari. Although Safari is shown the CA as trusted, it displays an error for the Web server certificate itself. The error message is "Safari can't verify the identity of 192.168.6.78" and offers me to add an exception "Always trust 192.168.6.78 when connection to 192.168.6.78".
Did anyone run in that before and might know how to fix it? Maybe Safari just doesn't support SSL certs for IP addr.?