<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
I wouldn’t recommend anyone using multi-server certs for CallManager.pem. See CSCur79530 (broken ITL), CSCuq02712 (can’t change security mode), and CSCur97909 (old certs in the db, related to CSCur79530). <br class="">
<div class=""><br class="webkit-block-placeholder">
</div>
<div class=""><br class="webkit-block-placeholder">
</div>
<div class="">-Ryan </div>
<br class="">
<div>
<div class="">On Feb 6, 2015, at 12:23 PM, Heim, Dennis <<a href="mailto:Dennis.Heim@wwt.com" class="">Dennis.Heim@wwt.com</a>> wrote:</div>
<br class="Apple-interchange-newline">
<div class="">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)" class="">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style class=""><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:windowtext;}
span.EmailStyle18
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:#1F497D;}
span.EmailStyle19
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
<div lang="EN-US" link="#0563C1" vlink="#954F72" class="">
<div class="WordSection1">
<p class="MsoNormal"><span style="color:#1F497D" class="">As of 10.5 SU1 we were still running into issues with the multi-server certificates not work. Supposedly it is fixed in SU2. However, we decided just to go with single server certs to resolve the issue.
Anyone have it working on SU2 and not getting device resets?<o:p class=""></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D" class=""> </span></p>
<div class="">
<p class="MsoNormal" style="text-autospace:none"><b class=""><span style="font-size: 10pt;" class="">Dennis Heim | Emerging Technology Architect (Collaboration)</span></b><span style="" class=""><o:p class=""></o:p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size: 10pt;" class="">World Wide Technology, Inc. | +1 314-212-1814<o:p class=""></o:p></span></p>
<p class="MsoNormal" style="text-autospace:none"><a href="https://twitter.com/CollabSensei" class=""><span style="color:blue;text-decoration:none" class=""><image001.png></span></a><span style="" class=""><o:p class=""></o:p></span></p>
<p class="MsoNormal" style="text-autospace:none"><a href="xmpp:dennis.heim@wwt.com" class=""><span style="color:#1F497D;text-decoration:none" class=""><image002.png></span></a><a href="tel:+13142121814" class=""><span style="color:#1F497D;text-decoration:none" class=""><image003.png></span></a><a href="sip:dennis.heim@wwt.com" class=""><span style="color:#1F497D;text-decoration:none" class=""><image004.png></span></a><span style="color:#1F497D" class=""><o:p class=""></o:p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:8.0pt;color:#1F497D" class="">"Innovation happens on project squared" --
<a href="http://www.projectsquared.com" class="">http://www.projectsquared.com</a><o:p class=""></o:p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="" class=""> </span></p>
</div>
<p class="MsoNormal"><span style="color:#1F497D" class=""> </span></p>
<div class="">
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in" class="">
<p class="MsoNormal"><b class="">From:</b> cisco-voip [<a href="mailto:cisco-voip-bounces@puck.nether.net" class="">mailto:cisco-voip-bounces@puck.nether.net</a>]
<b class="">On Behalf Of </b>Matthew Loraditch<br class="">
<b class="">Sent:</b> Friday, February 06, 2015 12:11 PM<br class="">
<b class="">To:</b> Kevin Przybylowski; <a href="mailto:cisco-voip@puck.nether.net" class="">
cisco-voip@puck.nether.net</a><br class="">
<b class="">Subject:</b> Re: [cisco-voip] GoDaddy UCC Cert?<o:p class=""></o:p></p>
</div>
</div>
<p class="MsoNormal"><o:p class=""> </o:p></p>
<p class="MsoNormal"><span style="color:#1F497D" class="">They have always done this. It’s a bonus I suppose. Even when you buy a single hostname cert they add www to it. A little lagniappe I suppose but a bit of work in this case.<o:p class=""></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D" class=""> </span></p>
<div class="">
<p class="MsoNormal" style="mso-margin-top-alt:auto;margin-bottom:12.0pt"><span style="font-size:10.0pt;color:#1F497D" class="">Matthew G. Loraditch – CCNP-Voice, CCNA-R&S, CCDA<br class="">
Network Engineer<br class="">
Direct Voice: 443.541.1518</span><span style="color:#1F497D" class=""><o:p class=""></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D" class=""><a href="https://www.facebook.com/heliontech?ref=hl" class=""><span style="font-size:8.0pt;color:blue" class="">Facebook</span></a></span><span style="font-size:8.0pt;color:#1F497D" class=""> |
</span><span style="color:#1F497D" class=""><a href="https://twitter.com/HelionTech" class=""><span style="font-size:8.0pt;color:blue" class="">Twitter</span></a></span><span style="font-size:8.0pt;color:#1F497D" class=""> |
</span><span style="color:#1F497D" class=""><a href="https://www.linkedin.com/company/helion-technologies?trk=top_nav_home" class=""><span style="font-size:8.0pt;color:blue" class="">LinkedIn</span></a></span><span style="font-size:8.0pt;color:#1F497D" class="">
| </span><span style="color:#1F497D" class=""><a href="https://plus.google.com/+Heliontechnologies/posts" class=""><span style="font-size:8.0pt;color:blue" class="">G+</span></a><o:p class=""></o:p></span></p>
</div>
<p class="MsoNormal"><span style="color:#1F497D" class=""> </span></p>
<div class="">
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in" class="">
<p class="MsoNormal"><b class="">From:</b> cisco-voip [<a href="mailto:cisco-voip-bounces@puck.nether.net" class="">mailto:cisco-voip-bounces@puck.nether.net</a>]
<b class="">On Behalf Of </b>Kevin Przybylowski<br class="">
<b class="">Sent:</b> Friday, February 06, 2015 11:55 AM<br class="">
<b class="">To:</b> <a href="mailto:cisco-voip@puck.nether.net" class="">cisco-voip@puck.nether.net</a><br class="">
<b class="">Subject:</b> [cisco-voip] GoDaddy UCC Cert?<o:p class=""></o:p></p>
</div>
</div>
<p class="MsoNormal"><o:p class=""> </o:p></p>
<p class="MsoNormal">I ran into an issue recently where I wasn’t able to upload a godaddy UCC cert to CUCM (Multi-Server) until regenerating the CSR with “<a href="http://www.common-name/" class="">www.Common-Name</a>” .<o:p class=""></o:p></p>
<p class="MsoNormal"><o:p class=""> </o:p></p>
<p class="MsoNormal">It appears godaddy adds www. as a SAN for all UCC certs now? Has anyone else seen this?<o:p class=""></o:p></p>
<p class="MsoNormal"><span style="font-size: 8pt; font-family: Tahoma, sans-serif;" class=""> </span></p>
<p class="MsoNormal"><o:p class=""> </o:p></p>
</div>
</div>
_______________________________________________<br class="">
cisco-voip mailing list<br class="">
<a href="mailto:cisco-voip@puck.nether.net" class="">cisco-voip@puck.nether.net</a><br class="">
https://puck.nether.net/mailman/listinfo/cisco-voip<br class="">
</div>
</div>
<br class="">
</body>
</html>