--On Mittwoch, 2. Januar 2002 02:08 +0100 Peter Pilsl <[EMAIL PROTECTED]> 
wrote:

> Is it possibly to provide more than one ssl-certificate on one
> imap-server ?
>
> I host several domains here and each domain gets its imap domainname
> for fetching their mails like imap.customer1.com imap.customer2.com
> ...
>
> And I want give any of the the possibility to use SSL-secured
> connections when fetching their mails.

According to RFC 2595, section 2.4, you should be able to use one 
certificate with multiple subjectAltName extensions of type dNSName:
   - If a subjectAltName extension of type dNSName is present in the
     certificate, it SHOULD be used as the source of the server's
     identity.

   - If the certificate contains multiple names (e.g. more than one
     dNSName field), then a match with any one of the fields is
     considered acceptable.

It would be interesting to know whether IMAP Clients implement this.

-- 
Norbert Klasen, Dipl.-Inform.
DAASI International GmbH                 phone: +49 7071 29 70336
Wilhelmstr. 106                          fax:   +49 7071 29 5114
72074 Tübingen                           email: [EMAIL PROTECTED]
Germany                                  web:   http://www.daasi.de


Reply via email to