Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

CUPS Calendaring with UCC SSL Cert

My exchange server's ssl cert is a 5in1 UCC cert where the url of my mail server is one of the SANs and not the primay CN. Can CUPS deal with this? Is there a work around? The primary CN of this cert is used elsewhere so when i put in the url I want CUPS to use it complains and says SubjectCN mismatch and if try to correct it switches to the wrong url.

Thanks in advance!

4 REPLIES
Red

Re: CUPS Calendaring with UCC SSL Cert

It's not a CUPS-specific problem. CUPS just use standard SSL library to establish the connection.

Due to the specification of SSL, the requested destination has to match the certificate, either the subject name or the alternative name.

Maybe you can talk to your CA to put the Exchange into certificate as alternative name.

Again, this is product neutral. This is just the nature of the SSL.

Michael

http://htluo.blogspot.com

New Member

Re: CUPS Calendaring with UCC SSL Cert

Michael,

My exchange server URL is one of the alternate names on the cert.

Apologies if that wasn't clear.

Thanks!

Red

Re: CUPS Calendaring with UCC SSL Cert

On CUPS > Presence > Presence Gateway, did you use IP address or the FQDN of the Exchange? If the FQDN matches with the certificate's alternative name, it should work.

Michael

New Member

Re: CUPS Calendaring with UCC SSL Cert

Michael,

I am using the FQDN, for the Exchange SSL Verification I get subject CN mismatch? Can I ignore that warning? Or is something else going?

Thanks!

333
Views
0
Helpful
4
Replies