This is my old site that I'm keeping up for historical purposes and is no longer updated. You probably want to see my new site.

March 25, 2004

Linux at 05:54:47 AM MT (link) | I finally figured out how to do multiple canonical names/common names in SSL certificates! See this nice article from the stunnel guys. The important link here is the Netscape SSL v2.0 certificate format specifications. Netscape's spec allows for globbing, so that I can add to my multihomed e-mail server SSL certificate:

CN=mail(.home|.hotnudiegirls.com)

I can check my e-mail from multiple places without any stupid security errors! Of course, this supposedly doesn't work for Microsoft Internet Explorer/Outlook/and friends. Oh well. Not as if you were concerned about security and privacy if you were using those anyway.