Hello, My design has currently the following variables: Clustername: cluster.customer.org Node 1: node1.customer.org Node 2: node2.customer.org therefore the public certificate has to have the following settings: Node1: CN=node1.customer.org SAN= node1.customer.org , cluster.customer.org Node2:…

Hi @faisal.memon [image] faisal.memon: When signing with ACME on node1 what does that mean? What's a "signing with ACME"? Where are all of your answers of the standard template?

Hi Juergen, Cisco Expressway Series supports ACME protocol (Automate Certificate Management Environment) which enables automatic certificate signing and deployment from Let’s Encrypt. I am using Let’s Encrypt for Cisco Jabber Mobile Remote access. Hope this helps. I don’t know how to answer questi…

[image] faisal.memon: I don’t know how to answer questions on standard template. Your domain name is required to check your configuration. Your question is unknown. What's the problem? What are your error messages? What means [image] faisal.memon: It is not allowing me sign with SAN. …

Hello Juergen, The domain name is colheli.com cluster name is edgecluster.colheli.com Node 1 : edge1.colheli.com Node 2 : edge2.colheli.com . On CSR, I use edgecluster.colheli.com , SAN edge1.colheli.com , edge2.colheli.com , colheli.com . when signing certificate on edge1.colheli.com i get error …

Checking one of your domains there is no answer - https://check-your-website.server-daten.de/?q=edge1.colheli.com There are some certificates created: Issuer not before not after Domain names LE-Duplicate next LE Let’s Encrypt Authority X3 2020-02-04 2020-05-04 edge1.colheli.com , edgeclus…

Hi Juergen, Thank you for your reply. When i create certificate without SAN on edge1.colheli.com it is successful. I face problem when i use clustername and name of peer which is edgecluster.colheli.com and edge2.colheli.com . I am following steps are per this document. https://www.cisco.com/…

Please read the shared output. You have created a certificate with edge1.colheli.com, edgecluster.colheli.com So the certificate creation has already worked. So do that again with edge2.

Hi Juergen, I want to add common name edge2.colheli.com in edge1 certificate and that is where it is failing. I really appreciate your help… Regards

Please read my answer and check that. [image] JuergenAuer: Normally: If you create a SAN-certificate via http-validation, all domains have the same ip address. I don’t know if your client supports such a configuration with different ip addresses If not, it's not possible.

Thank you Juergen. I will check and update. Regards

RE: Cisco Expressway Certificate

Help

Topic		Replies	Views
Cert Signing for Common SAN Entry on Two servers Help	8	1345	May 4, 2020
ACME sign operation failed: The server could not connect to validation target Help	0	2692	April 20, 2020
Expressway - ACME - CSR Help	15	4674	April 1, 2020
Subject Alternative Name (SAN) mechanism Server	7	15872	May 5, 2019
Using CNAME record for DNS validation Help	1	6804	May 4, 2020

RE: Cisco Expressway Certificate

Related topics