[FW-1] Client Auth

[Peter Goodridge <petegdr@FW1-NOSPAMYAHOO.COM>]

Hi,

I'm setting up a stand alone NG FP2 box on linux, that
will be used to give users access to a webserver using
Client Auth with SSL on port 443.  I'm using ssl with
a verisign test certificate, and it seems to work
fine.

There's only one strangeness.  When you first go the
site using the DNS name, the certificate works fine.
However; if you are using IE for a browser the next
authentication page shows up with an IP address in the
URL, instead of the DNS name, and IE rightly complains
that the web site name doesn't match the certificate.
When you go to the authorization page with Netscape
the next page shows up with the DNS name still and the
certificate stills matches as it should.

My question is: Is there something on the Checkpoint
side to force the follow on authentication pages to
always show up with the DNS name, and not the IP
address?

Any ideas?

THX,
Pete Goodridge

__________________________________________________
Do You Yahoo!?
Yahoo! - Official partner of 2002 FIFA World Cup
http://fifaworldcup.yahoo.com

=================================================
To set vacation, Out Of Office, or away messages,
send an email to LISTSERV@lists.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.checkpoint.com
=================================================