Forum Discussion

NGupta23's avatar
NGupta23
Icon for Nimbostratus rankNimbostratus
Jul 19, 2024

Alias entry under wide IP

  Hi Team, One quick question, suppose we add an alias under GTM wide IP. shall we need to update LTM VIP also which is behind the gtm pool with client profile certificate? means certificate should...
application delivery
f5
NGupta23's avatar
NGupta23
Icon for Nimbostratus rankNimbostratus

Thankyou!!

from the Host name here are we referring URL/FQDN name we have A record for?

zamroni777's avatar
zamroni777
Icon for Nacreous rankNacreous
Jul 19, 2024

basically yes.

e.g. eventhough the url's fqdn is cnamed thousands times, the client's http and ssl/tls layer doesnt care about it.
these layers only read resulted ip address.

  • NGupta23's avatar
    NGupta23
    Icon for Nimbostratus rankNimbostratus
    Jul 25, 2024

    Thanks zamroni777

     

    But it didn't work. we updated Alias but still its giving certificate error. so seems San name needed in Cert.

    • Aswin_mk's avatar
      Aswin_mk
      Icon for Cumulonimbus rankCumulonimbus
      Jul 25, 2024

      NGupta23If you are using different URLS in an application, you must add the FQDN in SAN or use one wild card certificate for it. 

    • zamroni777's avatar
      zamroni777
      Icon for Nacreous rankNacreous
      Jul 25, 2024

      that means there is hostname change in the your app's http layer.
      if it's browser based, you can see the http transactions network tab of browser developer console (press F12).

      the principle remains that http and tls/ssl layers doesn't care about cname, even it happens thousands time for a hostname.
      see below for www.f5.com as example that cn in the cert only contains www.f5.com eventhough the hostname is cnamed.