Forum Discussion

Nimbostratus

Jul 19, 2024

Alias entry under wide IP

Hi Team, One quick question, suppose we add an alias under GTM wide IP. shall we need to update LTM VIP also which is behind the gtm pool with client profile certificate? means certificate should...

application delivery

zamroni777

Nacreous

basically yes.

e.g. eventhough the url's fqdn is cnamed thousands times, the client's http and ssl/tls layer doesnt care about it.
these layers only read resulted ip address.

NGupta23

Nimbostratus

Jul 25, 2024

Thanks zamroni777

But it didn't work. we updated Alias but still its giving certificate error. so seems San name needed in Cert.

Aswin_mk
Cumulonimbus
Jul 25, 2024
NGupta23If you are using different URLS in an application, you must add the FQDN in SAN or use one wild card certificate for it.
zamroni777
Nacreous
Jul 25, 2024
that means there is hostname change in the your app's http layer.
if it's browser based, you can see the http transactions network tab of browser developer console (press F12).
the principle remains that http and tls/ssl layers doesn't care about cname, even it happens thousands time for a hostname.
see below for www.f5.com as example that cn in the cert only contains www.f5.com eventhough the hostname is cnamed.