Retour
-
Titre
Chrome browser give security warning when access FMS console via SSL -
Description
Chrome browser give following security warning when access FMS console via SSL.
NET::ERR_CERT_COMMON_NAME_INVALIDSubject Alternative Name MissingThe certificate for this site does not contain a Subject Alternative Name extension containing a domain name or IP address. -
Cause
Chrome 58 removed "Common Name” support. please see this link for more information.
https://chromium.googlesource.com/chromium/src/+/b88c4386cdc3ea8c18d1bfd9cbaf5017141e83f4
-
Résolution
Create a certificate that includes the SAN (Subject Alternative Name) field.
When using the
keytoolcommand this can be achieved by using the-extcommand option to include theSANextension; for example:keytool -keystore [keystore] -storepass nitrogen -genkeypair -alias tomcat -validity 730 -keyalg RSA -keysize 2048 -dname "CN=foglight.yourdomain.com, OU=Support, O=Quest, L=Toronto, ST=Ontario, C=CA" -ext SAN=dns:foglight.yourdomain.comFor more information on generating the certificate refer to What are the steps required to use an external signed certificate in the Foglight Management Server? (4254114).