![]() ![]() I don't much like servers with role names as their "true name". My question is: must that be the "actual" (or primary) name on the cert? Or can it be an additional name?Īnd if it *does* have to be the primary name, does that mean I have to change the name of the server proper? I would much prefer that it remain named benjamin. A quick and hopefully painless way to fix this error is to create a new certificate ( via the certificate wizard) and login under a new account name to contact a Mumble admin about the issue. Please switch to the new address on July 7th. An SSL error usually means your Mumble certificate is either corrupted or invalid for the user you're trying to log in as. Therefore, I can't use that name in my EAS client config.ģ) When I try to use the "role" DNS name, "async.mumble", in my client config, the client tosses an SSL error, *even though I've used that name to go to the https webclient and accepted it in Safari on the iPhone*.Ĥ) The iPhone EAS client *requires* that the SSL cert contain the name *by which it is accessing the server*. One week after a redirect will be put in place, but will cause your mumble to show a certificate error if you continue to try and use the old address. Click on Configure in the top menu and select Certificate Wizard. ![]() and zmail *has* to resolve to 2 different addresses, because apparently my firewall setup won't permit packets to the public address from the private LAN to get NATted back inside.Īny ideas other than replacing the firewall (which may be practical.)ġ) I'm told that in order to avoid DNS/caching problems on smart phones with Exchange ActiveSync, the *phone's* idea of the IP for the DNS name you configure must be the same whether you're inside your firewall or out - that is, both sides of the split-horizon must return for it the public address of your firewall.Ģ) I presently have a self-signed cert named after the *real* name of my server, benjamin.mumble, which resolves to the firewall public address in my public zone, but the *actual* address of the server from inside. Importing a Mumble Trusted Certificate Open your Mumble connection client. because all the doco says that you have to have the EAS server name be the same IP address from both sides of your firewall, or everything will blow to hell. So, even if I recreated the certificate so that it's name was zmail, the error I'm getting when I try to set up the Exchange account on the iPhone isn't going to go away. Most people call it, and that name resolves to two different addresses the address of my firewall in my public DNS zone, and the actual address of the server in my internal zone. That's the server's actual name, so that's what I created the self-signed cert pointed to.īut of course, that's not what anyone actually *calls* it. So I'm trying to get Zimbra Mobile working.Īnd I'm about to be hoist on my own petard I can see it coming. ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |