[cisco-voip] multi-SAN / server certificates vs individual certs (CUCM/IMP)

[Charles Goldsmith]

I've used multi-san certs on at least a dozen installs and have had no
issues at all.  In fact, with a good SSL provider, you can use the same
Multi-SAN on CUCM, CUC, UCCX, Expressways.  I like how Digicert does it,
just duplicate the cert and make sure all of the hostnames are listed in
the SAN.


On Thu, Jun 28, 2018 at 9:37 AM Lelio Fulgenzi <lelio at uoguelph.ca> wrote:

>
> We're in the process of installing signed certs and we have the choice
> between multi-SAN cert with the publisher CSR and rely on the internals to
> have that cert distributed to the subs and the imp nodes -OR- go with
> individual certs.
>
> It's a last minute thing, so I still need to do some research, but I'm
> wondering what people have been doing out there. We're less concerned with
> cost than we are future stability. I know that this multi-san support is
> recent with v10.x - have they ironed out the bugs? We're going with 11.5.
>
> Thoughts?
>
>
> ---
> Lelio Fulgenzi, B.A. | Senior Analyst
> Computing and Communications Services | University of Guelph
> Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON |
> N1G 2W1
> 519-824-4120 Ext. 56354 <(519)%20824-4120> | lelio at uoguelph.ca<mailto:
> lelio at uoguelph.ca>
>
> www.uoguelph.ca/ccs<http://www.uoguelph.ca/ccs> | @UofGCCS on Instagram,
> Twitter and Facebook
>
> [University of Guelph Cornerstone with Improve Life tagline]
>
> _______________________________________________
> cisco-voip mailing list
> cisco-voip at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-voip
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://puck.nether.net/pipermail/cisco-voip/attachments/20180628/1e6db33e/attachment.html>