Forum Discussion
MH
Altocumulus
AltocumulusCNAME redirection to GTM certificate SAN requirement
Hello All, If we are using a CNAME record to redirect DNS request to the listener on the GTM / DNS module, does the server certficate have to include both the original FQDN and the FQDN referenced b...
To be honest this is not an F5 related question but a general question about how DNS Cname and SSL cert CN/SAN/SNI work together but I think you should just check the Internet as there is enough data for such general questions.
LouisK
MVP
MVPCNAME is at the DNS level. If the CNAME FQDN is in the cert, you are fine. Your browser/connection will use the request FQDN and not the CNAME branching.
We don't add the underlying names of our VIPs, just the application fqdn in our SSL certs. We have never had an issue.