Reference10:General/Certificates/Create new: Difference between revisions
Jump to navigation
Jump to search
No edit summary |
(IE needs IP addresses to be stored as DNS name) |
||
(One intermediate revision by the same user not shown) | |||
Line 8: | Line 8: | ||
|- valign=top | |- valign=top | ||
| '''Signature''' | | '''Signature''' | ||
| The signature algorithm that should be used to sign the certificate. The standard algorithm is SHA1. You can also select | | The signature algorithm that should be used to sign the certificate. The standard algorithm is SHA1. You can also select SHA256, SHA384 and SHA512 that are more secure. | ||
|- valign=top | |- valign=top | ||
| '''Validity''' | | '''Validity''' | ||
Line 27: | Line 27: | ||
If you add any DNS names or IP addresses the browser will ignore the common name. Therefore you also have to add the domain from the common name as a DNS name. | If you add any DNS names or IP addresses the browser will ignore the common name. Therefore you also have to add the domain from the common name as a DNS name. | ||
For compatibility with Internet Explorer it is recommended to add IP addresses also as DNS names. |
Latest revision as of 10:59, 22 April 2014
This dialog is for creating self-signed certificates and certificate requests.
Type | Self-signed certificate or signing request. |
Key | Select the key strength of the certificate here. Stronger keys are more secure but encryption/decryption is way slower. You can also reuse the key of the current certificate. |
Signature | The signature algorithm that should be used to sign the certificate. The standard algorithm is SHA1. You can also select SHA256, SHA384 and SHA512 that are more secure. |
Validity | The number of years the certificate shall be valid from now. Applies only to self-signed certificates. |
Common Name | The common name should match the host name of the box. |
Other naming fields | These fields are optional. |
DNS Name | If the box has got a DNS name you should enter it here. It will be stored as a SubjectAltName in the certificate. |
IP address | If the box has got a fixed IP address you should enter it here. It will be stored as a SubjectAltName in the certificate. |
If you add any DNS names or IP addresses the browser will ignore the common name. Therefore you also have to add the domain from the common name as a DNS name.
For compatibility with Internet Explorer it is recommended to add IP addresses also as DNS names.