09-24-2019 04:06 PM
Hi guys,
In the existing cluster there is multi-san tomcat certificate given by CA. New added subscriber only taken tomcat-trust, but does not have the same tomcat certificate. It is using self-signed tomcat certificate. I cant upload multisan tomcat certificate, it seems have to generate csr.
What is the solution for the case?
Regenerating clusterwide multisan certificate and upload to publisher again? Will it distribute certificate and new subscriber get new one?
Regards
Solved! Go to Solution.
09-24-2019 07:29 PM
All that is completely expected, the multi-SAN certificate is only distributed to servers which were already part of the cluster and the CSR generation includes them all by default.
So, yes, you'd need to go through the multi-san CSR procedure again if you want that new server to also use a multi-san certificate.
09-24-2019 07:29 PM
All that is completely expected, the multi-SAN certificate is only distributed to servers which were already part of the cluster and the CSR generation includes them all by default.
So, yes, you'd need to go through the multi-san CSR procedure again if you want that new server to also use a multi-san certificate.
09-25-2019 12:46 AM
05-06-2020 08:49 AM
Hi java,
I have a question related to the same "issue": is it mandatory to do the multi-san process once again or we can have single CSR signed for the new servers added?
Thank you!
05-06-2020 09:31 AM
I have not tested that scenario, so I cannot confirm if it would be supported, but in theory, it should work, just as with the self-signed certificate the server will generate upon installation.
05-06-2020 09:33 AM - edited 05-06-2020 09:38 AM
Even if it might work it wouldn't be any less work really. You should create a new CSR with all the names in the multi SAN.
05-06-2020 10:32 AM
Java, Roger, thank you very much for your quick responses,
I will do the multi-san process once again. Thank you again!
Martin
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide