Forum Discussion

Nimbostratus

1 year ago

Alias entry under wide IP

Hi Team, One quick question, suppose we add an alias under GTM wide IP. shall we need to update LTM VIP also which is behind the gtm pool with client profile certificate? means certificate should...

application delivery

zamroni777

MVP

1 year ago

basically yes.

e.g. eventhough the url's fqdn is cnamed thousands times, the client's http and ssl/tls layer doesnt care about it.
these layers only read resulted ip address.

NGupta23

Nimbostratus

1 year ago

Thanks zamroni777

But it didn't work. we updated Alias but still its giving certificate error. so seems San name needed in Cert.

Aswin_mk
MVP
1 year ago
NGupta23If you are using different URLS in an application, you must add the FQDN in SAN or use one wild card certificate for it.
zamroni777
MVP
1 year ago
that means there is hostname change in the your app's http layer.
if it's browser based, you can see the http transactions network tab of browser developer console (press F12).
the principle remains that http and tls/ssl layers doesn't care about cname, even it happens thousands time for a hostname.
see below for www.f5.com as example that cn in the cert only contains www.f5.com eventhough the hostname is cnamed.