<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
Yeah we don’t support 4096-bit certs.
<div class=""><br class="">
<div class="">-Ryan </div>
<br class="">
<div>
<div class="">On Feb 9, 2015, at 4:42 PM, Erich Novak <<a href="mailto:Erich.Novak@nts.eu" class="">Erich.Novak@nts.eu</a>> wrote:</div>
<br class="Apple-interchange-newline">
<div class="">
<div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; font-size: 14px; font-family: Calibri, sans-serif;" class="">
<div class="">Oh – and btw watch out for CSCur67631 – totally unrelated to multi-server but could be a huge problem… </div>
<div class=""><br class="">
</div>
<div class="">rgds</div>
<div class="">erich</div>
<div class=""><br class="">
</div>
<span id="OLK_SRC_BODY_SECTION" class="">
<div style="font-family: Calibri; font-size: 11pt; text-align: left; border-width: 1pt medium medium; border-style: solid none none; padding: 3pt 0in 0in; border-top-color: rgb(181, 196, 223);" class="">
<span style="font-weight:bold" class="">Von: </span>"Ryan Ratliff (rratliff)" <<a href="mailto:rratliff@cisco.com" class="">rratliff@cisco.com</a>><br class="">
<span style="font-weight:bold" class="">Datum: </span>Montag, 09. Februar 2015 19:44<br class="">
<span style="font-weight:bold" class="">An: </span>Kevin Przybylowski <<a href="mailto:kevinp@advancedtsg.com" class="">kevinp@advancedtsg.com</a>><br class="">
<span style="font-weight:bold" class="">Cc: </span>cisco-voip voyp list <<a href="mailto:cisco-voip@puck.nether.net" class="">cisco-voip@puck.nether.net</a>><br class="">
<span style="font-weight:bold" class="">Betreff: </span>Re: [cisco-voip] GoDaddy UCC Cert?<br class="">
</div>
<div class=""><br class="">
</div>
<blockquote id="MAC_OUTLOOK_ATTRIBUTION_BLOCKQUOTE" style="BORDER-LEFT: #b5c4df 5 solid; PADDING:0 0 0 5; MARGIN:0 0 0 5;" class="" type="cite">
<div class="">
<div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
If you are doing MRA watch out for CSCuo41160 and then CSCus73272 if you go to 10.5(2).
<div class=""><br class="">
</div>
<div class="">Other than those things have been good.</div>
<div class=""><br class="">
<div class="">-Ryan </div>
<br class="">
<div class="">
<div class="">On Feb 9, 2015, at 1:36 PM, Kevin Przybylowski <<a href="mailto:kevinp@advancedtsg.com" class="">kevinp@advancedtsg.com</a>> wrote:</div>
<br class="Apple-interchange-newline">
<div class="">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)" class="">
<style class=""><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:windowtext;}
span.EmailStyle18
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:#1F497D;}
span.EmailStyle19
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:#1F497D;}
span.EmailStyle20
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
<div lang="EN-US" link="#0563C1" vlink="#954F72" class="">
<div class="WordSection1">
<div class="MsoNormal"><span style="color:#1F497D" class="">What about Multi-Server tomcat in CUCM 10.5su1a? Any experience with that scenario?<o:p class=""></o:p></span></div>
<div class=""><span style="color:#1F497D" class=""> </span><br class="webkit-block-placeholder">
</div>
<div class="">
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in" class="">
<div class="MsoNormal"><b class="">From:</b> Ryan Ratliff (rratliff) [<a href="mailto:rratliff@cisco.com" class="">mailto:rratliff@cisco.com</a>]
<br class="">
<b class="">Sent:</b> Monday, February 9, 2015 1:31 PM<br class="">
<b class="">To:</b> Heim, Dennis<br class="">
<b class="">Cc:</b> Matthew Loraditch; Kevin Przybylowski; cisco-voip voyp list<br class="">
<b class="">Subject:</b> Re: [cisco-voip] GoDaddy UCC Cert?<o:p class=""></o:p></div>
</div>
</div>
<div class="MsoNormal"><o:p class=""> </o:p></div>
<div class="MsoNormal">I wouldn’t recommend anyone using multi-server certs for CallManager.pem. See CSCur79530 (broken ITL), CSCuq02712 (can’t change security mode), and CSCur97909 (old certs in the db, related to CSCur79530). <span style="font-size:12.0pt" class=""><o:p class=""></o:p></span></div>
<div class="">
<div class="MsoNormal"><o:p class=""> </o:p></div>
</div>
<div class="">
<div class="MsoNormal"><o:p class=""> </o:p></div>
</div>
<div class="">
<div class="MsoNormal">-Ryan <o:p class=""></o:p></div>
</div>
<div class="MsoNormal"><o:p class=""> </o:p></div>
<div class="">
<div class="">
<div class="MsoNormal">On Feb 6, 2015, at 12:23 PM, Heim, Dennis <<a href="mailto:Dennis.Heim@wwt.com" class="">Dennis.Heim@wwt.com</a>> wrote:<o:p class=""></o:p></div>
</div>
<div class="MsoNormal"><o:p class=""> </o:p></div>
<div class="">
<div class="">
<div class="MsoNormal"><span style="color:#1F497D" class="">As of 10.5 SU1 we were still running into issues with the multi-server certificates not work. Supposedly it is fixed in SU2. However, we decided just to go with single server certs to resolve the issue.
Anyone have it working on SU2 and not getting device resets?</span><o:p class=""></o:p></div>
<div class="MsoNormal"><span style="color:#1F497D" class=""> </span><o:p class=""></o:p></div>
<div class="">
<p class="MsoNormal" style="text-autospace:none"><b class=""><span style="font-size:10.0pt" class="">Dennis Heim | Emerging Technology Architect (Collaboration)</span></b><o:p class=""></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:10.0pt" class="">World Wide Technology, Inc. | +1 314-212-1814</span><o:p class=""></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><a href="https://twitter.com/CollabSensei" class=""><span style="color:blue;text-decoration:none" class=""><image001.png></span></a><o:p class=""></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><a href="xmpp:dennis.heim@wwt.com" class=""><span style="color:#1F497D;text-decoration:none" class=""><image002.png></span></a><a href="tel:+13142121814" class=""><span style="color:#1F497D;text-decoration:none" class=""><image003.png></span></a><a href="sip:dennis.heim@wwt.com" class=""><span style="color:#1F497D;text-decoration:none" class=""><image004.png></span></a><o:p class=""></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:8.0pt;color:#1F497D" class="">"Innovation happens on project squared" --
<a href="http://www.projectsquared.com/" class="">http://www.projectsquared.com</a></span><o:p class=""></o:p></p>
<p class="MsoNormal" style="text-autospace:none"> <o:p class=""></o:p></p>
</div>
<div class="MsoNormal"><span style="color:#1F497D" class=""> </span><o:p class=""></o:p></div>
<div class="">
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in" class="">
<div class="MsoNormal"><b class="">From:</b> cisco-voip [<a href="mailto:cisco-voip-bounces@puck.nether.net" class="">mailto:cisco-voip-bounces@puck.nether.net</a>]
<b class="">On Behalf Of </b>Matthew Loraditch<br class="">
<b class="">Sent:</b> Friday, February 06, 2015 12:11 PM<br class="">
<b class="">To:</b> Kevin Przybylowski; <a href="mailto:cisco-voip@puck.nether.net" class="">
cisco-voip@puck.nether.net</a><br class="">
<b class="">Subject:</b> Re: [cisco-voip] GoDaddy UCC Cert?<o:p class=""></o:p></div>
</div>
</div>
<div class="MsoNormal"> <o:p class=""></o:p></div>
<div class="MsoNormal"><span style="color:#1F497D" class="">They have always done this. It’s a bonus I suppose. Even when you buy a single hostname cert they add www to it. A little lagniappe I suppose but a bit of work in this case.</span><o:p class=""></o:p></div>
<div class="MsoNormal"><span style="color:#1F497D" class=""> </span><o:p class=""></o:p></div>
<div class="">
<p class="MsoNormal" style="mso-margin-top-alt:auto;margin-bottom:12.0pt"><span style="font-size:10.0pt;color:#1F497D" class="">Matthew G. Loraditch – CCNP-Voice, CCNA-R&S, CCDA<br class="">
Network Engineer<br class="">
Direct Voice: 443.541.1518</span><o:p class=""></o:p></p>
<div class="MsoNormal"><span style="color:#1F497D" class=""><a href="https://www.facebook.com/heliontech?ref=hl" class=""><span style="font-size:8.0pt;color:blue" class="">Facebook</span></a></span><span style="font-size:8.0pt;color:#1F497D" class=""> |
</span><span style="color:#1F497D" class=""><a href="https://twitter.com/HelionTech" class=""><span style="font-size:8.0pt;color:blue" class="">Twitter</span></a></span><span style="font-size:8.0pt;color:#1F497D" class=""> |
</span><span style="color:#1F497D" class=""><a href="https://www.linkedin.com/company/helion-technologies?trk=top_nav_home" class=""><span style="font-size:8.0pt;color:blue" class="">LinkedIn</span></a></span><span style="font-size:8.0pt;color:#1F497D" class="">
| </span><span style="color:#1F497D" class=""><a href="https://plus.google.com/+Heliontechnologies/posts" class=""><span style="font-size:8.0pt;color:blue" class="">G+</span></a></span><o:p class=""></o:p></div>
</div>
<div class="MsoNormal"><span style="color:#1F497D" class=""> </span><o:p class=""></o:p></div>
<div class="">
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in" class="">
<div class="MsoNormal"><b class="">From:</b> cisco-voip [<a href="mailto:cisco-voip-bounces@puck.nether.net" class="">mailto:cisco-voip-bounces@puck.nether.net</a>]
<b class="">On Behalf Of </b>Kevin Przybylowski<br class="">
<b class="">Sent:</b> Friday, February 06, 2015 11:55 AM<br class="">
<b class="">To:</b> <a href="mailto:cisco-voip@puck.nether.net" class="">cisco-voip@puck.nether.net</a><br class="">
<b class="">Subject:</b> [cisco-voip] GoDaddy UCC Cert?<o:p class=""></o:p></div>
</div>
</div>
<div class="MsoNormal"> <o:p class=""></o:p></div>
<div class="MsoNormal">I ran into an issue recently where I wasn’t able to upload a godaddy UCC cert to CUCM (Multi-Server) until regenerating the CSR with “<a href="http://www.common-name/" class="">www.Common-Name</a>” .<o:p class=""></o:p></div>
<div class="MsoNormal"> <o:p class=""></o:p></div>
<div class="MsoNormal">It appears godaddy adds www. as a SAN for all UCC certs now? Has anyone else seen this?<o:p class=""></o:p></div>
<div class="MsoNormal"><span style="font-size: 8pt; font-family: Tahoma, sans-serif;" class=""> </span><o:p class=""></o:p></div>
<div class="MsoNormal"> <o:p class=""></o:p></div>
</div>
<div class="MsoNormal"><span style="font-size: 12pt; font-family: 'Times New Roman', serif;" class="">_______________________________________________<br class="">
cisco-voip mailing list<br class="">
<a href="mailto:cisco-voip@puck.nether.net" class="">cisco-voip@puck.nether.net</a><br class="">
<a href="https://puck.nether.net/mailman/listinfo/cisco-voip" class="">https://puck.nether.net/mailman/listinfo/cisco-voip</a><o:p class=""></o:p></span></div>
</div>
</div>
<div class=""><span style="font-size: 12pt; font-family: 'Times New Roman', serif;" class=""> </span><br class="webkit-block-placeholder">
</div>
</div>
</div>
</div>
</div>
<br class="">
</div>
</div>
</div>
</blockquote>
</span></div>
</div>
</div>
<br class="">
</div>
</body>
</html>