3.64.16. SSLVerifyCNName and SSLVerifyCNScheme Previous topic Parent topic Child topic Next topic

SSLVerifyCNName sets the name which is used when verifying the hostname against the certificate presented by Duo's server. SSLVerifyCNScheme controls how the verification is done, for example, if wildcards are allowed. For more information, see IO::Socket::SSL Opens in new window.
The following allow wildcard certificate name *.duosecurity.com to match.
SSLVerifyCNName duosecurity.com
SSLVerifyCNScheme http