On 08/20/2014 03:58 PM, Elizabeth Jones wrote:
> additional info -
> I increased logging on my supplier and see this error now -
> TLS: hostname does not match CN in peer certificate
> When I created the replication agreement, it is giving me a default
> consumer, I don't know why. The default is ldap1.mycompany.com:389.
> The certificate from ldap1 has just ldap1 as the name. I entered ldap1
> and port 636 when I created the agreement, but after I do this it
> ldap1.mycompany.com:636. Would this be why its failing, it wants the
> certificate to have ldap1.mycompany.com
in it rather than ldap1?
Correct, you need to use the fully qualified domain name for certificates.
ok - what is confusing to me is that another server is able to replicate
successfully to this server using this cert. I used the same script to
generate the certs on all 4 servers, the setupssl2.sh script.