Forum Discussion
Jose_H_134227
Nimbostratus
NimbostratusOne IP, multiple virtual hosts, multiple domains, multiple wildcard certs
I have one server with multiple domains, and all those domains point to the virtual IP in our bigip.
The problem is that now I need to configure SSL wildcard certs for these domains. Is that eve...
Kevin_Stewart
Employee
EmployeeIt is absolutely possible, and you have at least three options:
-
Wildcard cert - you'll likely find that this is the most expensive option.
-
SAN or Subject Alt Name cert - like a wildcard but contains a set of names in the subjectAltName section of the x.509. It's generally cheaper than wildcard certs, and you can technically put wildcard subject alt names in a SAN cert. you'll usually find though that a public CA won't allow this.
-
SNI or Server Name Indicator - a TLS extension that allows you to have individual server name certs and the BIG-IP will switch the SSL profile based on what the client is asking for. It requires TLS, so not an option for older clients.
