I have setup a SSL Certificate at go daddy. I created the priv key and then the CSR
I imported the Priv Key and CRT that I got back from godaddy and when I use windows 7 I cant connect to the mirotik using SSTP no problem.
The CN is www.somesite.com (example)
I had to setup a website using the www so I created another certificate and called it secure.somesite.com
I made the priv key then the CSR uploaded it to go daddy with a CN of secure.somesite.com and then downloaded the CRT
I then uploaded the new priv key and CRT to mikrotik
I then removed the www.somesite.com CRT and put in the secure.somesite.com CRT
I made sure from the DNS settings at go daddy that the secure.somesite.com pinged the mikrotik static IP
Now when I connect though the mikrotik or windows tells me
"The Ceritifactes CN name does not match the passed value…
I have made sure 3 to 4 times that the CN name on the certificate is secure.somesite.com and that go daddy dns point the secure.somesite.com to the WAN ip of the mikrotik. But no matter what I do thsi error does not go away. After much googling I am sure that the certificate is right and that the CN does match the DNS entry pint to the mikrotik IP
I am at a loss and I am not sure what to do now.
Hopefully this is not confusing for somone reading it right now
In windows 7 I opend VPN settings and then in the connect to I entered secure.somesite.com I made sure it was the same CN that I amde the certificat with.
Can you have 2 SSl certs with different names www.something.com and another.something.com point to the same IP address? or will this mess up the SSL via DNS
eg. www.something.com 1.1.1.1
and another.something.com 1.1.1.1
Both my SSL Certs point to FQDNs that are pointed at the same IP will this mess thigs up?
Okay incase anyone reads this I solved the problem a different way
I Bought yet ANOTHER cert from go daddy
Made a new dns entry sstp.something.com
made up the priv key and then the CSR
pasted it in and then waited for the CRt to generate
Then I downloaded the CRT and copied the proiv key and CRT to the mikrotik
This time I rebooted the Mirotik as it was still seeing the other files which I delted for some reason???
I then imported the CRT and then the PRV key
I got the KR in the left at the Certificate window
I then made sure the DNS in go daddy for sstp.something.com pointed to the IP of the mikrotik
I then delted and remade the SSTP VPN connector in Windows 7
VOILA now it works??? WTH
GOtta love it
Hope this helps someone else
With everything I have experienced I may try to figure out how to contribute to the SSTP MIkrotik how to and put in STEP by STEP how I did this