Return-Path: Delivered-To: apmail-httpd-users-archive@www.apache.org Received: (qmail 73970 invoked from network); 3 Feb 2006 16:02:32 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (209.237.227.199) by minotaur.apache.org with SMTP; 3 Feb 2006 16:02:32 -0000 Received: (qmail 65836 invoked by uid 500); 3 Feb 2006 16:02:21 -0000 Delivered-To: apmail-httpd-users-archive@httpd.apache.org Received: (qmail 65822 invoked by uid 500); 3 Feb 2006 16:02:20 -0000 Mailing-List: contact users-help@httpd.apache.org; run by ezmlm Precedence: bulk Reply-To: users@httpd.apache.org list-help: list-unsubscribe: List-Post: List-Id: Delivered-To: mailing list users@httpd.apache.org Received: (qmail 65811 invoked by uid 99); 3 Feb 2006 16:02:20 -0000 Received: from asf.osuosl.org (HELO asf.osuosl.org) (140.211.166.49) by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 03 Feb 2006 08:02:20 -0800 X-ASF-Spam-Status: No, hits=-0.0 required=10.0 tests=SPF_HELO_PASS,SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (asf.osuosl.org: domain of jorton@redhat.com designates 66.187.233.31 as permitted sender) Received: from [66.187.233.31] (HELO mx1.redhat.com) (66.187.233.31) by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 03 Feb 2006 08:02:20 -0800 Received: from int-mx1.corp.redhat.com (int-mx1.corp.redhat.com [172.16.52.254]) by mx1.redhat.com (8.12.11/8.12.11) with ESMTP id k13G1vxH030295; Fri, 3 Feb 2006 11:01:57 -0500 Received: from radish.cambridge.redhat.com (radish.cambridge.redhat.com [172.16.18.90]) by int-mx1.corp.redhat.com (8.11.6/8.11.6) with ESMTP id k13G1p105403; Fri, 3 Feb 2006 11:01:51 -0500 Received: (from jorton@localhost) by radish.cambridge.redhat.com (8.13.4/8.13.4/Submit) id k13G1oud024110; Fri, 3 Feb 2006 16:01:50 GMT Date: Fri, 3 Feb 2006 16:01:50 +0000 From: Joe Orton To: Olaf van der Spek Cc: users@httpd.apache.org Message-ID: <20060203160150.GA23886@redhat.com> Mail-Followup-To: Olaf van der Spek , users@httpd.apache.org References: Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.4.2.1i X-Virus-Checked: Checked by ClamAV on apache.org Subject: Re: [users@httpd] double wild card ssl certificates X-Spam-Rating: minotaur.apache.org 1.6.2 0/1000/N On Fri, Feb 03, 2006 at 12:56:38PM +0100, Olaf van der Spek wrote: > On 2/3/06, Khai Doan wrote: > > My company has a wild card SSL server certificate *.domain.com . However we > > need to use double wild card certificate *.*.domain.com. > > > > Can I use *.domain.com (which is a server certificate, signed by a trusted > > root CA) to sign the *.*.domain.com ? > > Does * match *.* also? Following the RFC 2818 rules, no, it doesn't. joe --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See for more info. To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org " from the digest: users-digest-unsubscribe@httpd.apache.org For additional commands, e-mail: users-help@httpd.apache.org