For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Muhammad_Irfan1's avatar
Nov 05, 2014

Common name and Subject alternative name, IP or Domain name

I created a .CSR file and the owner created a SSL certificate for F5.

 

Now what i want to ask is that i put VS IP in Common Name, and Subject alternative names while the the VS ip 10.50.171.5 is resolved to www.siebel.com. Now i am confuse that will only VS ip will work? DNS server is somewhere before the F5. so client puts www.siebel.com it will be resolved to 10.50.171.8. So only IP in Comman name and SAN will work or do i need to put Doman name as well.

 

3 Replies

  • You should put www.siebel.com as the common name in the certificate. List the virtual server IP address as a SAN.

     

    • Muhammad_Irfan1's avatar
      Muhammad_Irfan1
      Icon for Cirrus rankCirrus
      Ok. and once they create certificate and give it back to me. I will upload it as a separate certificate or add it to that SSL certificate in which i have created .CSR file. Because the certificate provided is only certificate without any key. So the key will be used of F5 i guess
    • Cory_50405's avatar
      Cory_50405
      Icon for Noctilucent rankNoctilucent
      If the CSR was generated from some other server, you'll need that server's private key along with the certificate to load them both onto the LTM.