I use subjectAltName on the cert to include the IP address and alternate DNS names. You need to add the "subjectAltName=" name to the openssl.cnf file in the v3_ca and v3_req sections. Works for us anyway.

-Frank

On Fri, Apr 15, 2016 at 9:28 AM, Prashanth P.Nair prashanthppp@gmail.com wrote:

Hi

Currently my LDAP server is having self signed FQDN based SSL certificate .I would like to have IP based SSL certificate for the same node.IS that feasible ?

Below certificate issued to FQDN i.e CN=FQN.

TLSCACertificateFile /etc/ssl/ldap.pem TLSCertificateKeyFile /etc/ssl/ldap.pem TLSCertificateFile /etc/ssl/ldap.pem

Br/Prashanth.