<html><body><div style="color:#000; background-color:#fff; font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:14px"><div id="yui_3_16_0_1_1430330734824_7812"><br></div><div style="font-family: HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif; font-size: 14px;" id="yui_3_16_0_1_1430330734824_7819"><div style="font-family: HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif; font-size: 16px;" id="yui_3_16_0_1_1430330734824_7818"><div class="y_msg_container" id="yui_3_16_0_1_1430330734824_7871"><div id="yiv1685658403"><div style="color:#000;background-color:#fff;font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:14px;" id="yui_3_16_0_1_1430330734824_7870"><div id="yiv1685658403yui_3_16_0_1_1430318241193_6643"><span>Hello,</span></div><div id="yiv1685658403yui_3_16_0_1_1430318241193_6643"><span><br></span></div><div id="yiv1685658403yui_3_16_0_1_1430318241193_6643" dir="ltr" class="yiv1685658403" style="">I recently implemented a secured communication between two sites in which one acts as the server and the other as the client. To accomplish this, I used openssl to generate self-signed CA, Server and Client certificates (the calls are made using cURL).</div><div id="yiv1685658403yui_3_16_0_1_1430318241193_6643"><br></div><div id="yiv1685658403yui_3_16_0_1_1430318241193_6643">It all works beautifully and, testing my "proof-of-concept" has shown that if one of the pieces is missing from the equation (CA, Server, Client certificates), the communication ceases.</div><div id="yiv1685658403yui_3_16_0_1_1430318241193_6643"><br></div><div id="yiv1685658403yui_3_16_0_1_1430318241193_6643">But once I showed my work to people in my company, one of them asked me why did I choose not to add the client hostname to the Client Certificate, thus making it usable only by that specific client.</div><div id="yiv1685658403yui_3_16_0_1_1430318241193_6643"><br></div><div id="yiv1685658403yui_3_16_0_1_1430318241193_6643">And so I started searching online for ways to do it, but found nothing. I also looked into the openssl site and documentation and found nothing there either. The truth is that I don't even know if this is possible or even if this is the right question to ask. </div><div id="yiv1685658403yui_3_16_0_1_1430318241193_6643"><br></div><div id="yiv1685658403yui_3_16_0_1_1430318241193_6643">But can it be done? And if so, could you show me how, or where should I go to get more information on how to accomplish this?</div><div id="yiv1685658403yui_3_16_0_1_1430318241193_6643"><br></div><div id="yiv1685658403yui_3_16_0_1_1430318241193_6643" dir="ltr">If you need more information on how I setup this communication, please let me know and I will be glad to share it here.</div><div id="yiv1685658403yui_3_16_0_1_1430318241193_6643" dir="ltr"><br></div><div id="yiv1685658403yui_3_16_0_1_1430318241193_6643" dir="ltr">Thanks,</div><div id="yiv1685658403yui_3_16_0_1_1430318241193_6643" dir="ltr">Alex</div><div></div><div id="yiv1685658403yui_3_16_0_1_1430318241193_6644"><br></div></div></div></div> </div> </div> </div></body></html>