Bacula-users

Re: [Bacula-users] Daemon listening on two subnets, requires TLS

2009-09-30 08:14:05
Subject: Re: [Bacula-users] Daemon listening on two subnets, requires TLS
From: Frank Sweetser <fs AT WPI DOT EDU>
To: baculalist AT encambio DOT com
Date: Wed, 30 Sep 2009 08:10:41 -0400
On 9/30/2009 7:38 AM, baculalist AT encambio DOT com wrote:

> What is the proper way to go about listening on two subnets while
> presenting the proper certificate to incoming TLS connections?

There are two general solutions.

The first is to set up split DNS views, such that all clients use the same 
hostname, and get directed to the correct IP address.

The second option is to create a list of alternate subject names in the 
certificate, so that all of the hostnames are considered valid for that cert.

-- 
Frank Sweetser fs at wpi.edu  |  For every problem, there is a solution that
WPI Senior Network Engineer   |  is simple, elegant, and wrong. - HL Mencken
     GPG fingerprint = 6174 1257 129E 0D21 D8D4  E8A3 8E39 29E3 E2E8 8CEC

------------------------------------------------------------------------------
Come build with us! The BlackBerry&reg; Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay 
ahead of the curve. Join us from November 9&#45;12, 2009. Register now&#33;
http://p.sf.net/sfu/devconf
_______________________________________________
Bacula-users mailing list
Bacula-users AT lists.sourceforge DOT net
https://lists.sourceforge.net/lists/listinfo/bacula-users