* Ryan Novosielski [2008-08-17 00:54:44 -0400]:
> However, my question is about whether or not the CN's have to match the
> DNS name. It appears as if they do. 

For server certificates, yes. For client certificates, no. The "TLS
Allowed CN" configuration directive is meant to apply to client
certificates.

> In that case, though, it is curious
> to me why some of the examples that Landon has in the manual have
> Allowed CN = bacula AT example.whatever DOT com, since no host name will ever
> have bacula@anything in it. Perhaps that was only for the console, which
> maybe does not have this restriction. Not sure.

-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
Bacula-users mailing list
Bacula-users AT lists.sourceforge DOT net
https://lists.sourceforge.net/lists/listinfo/bacula-users