For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Jose_H_134227's avatar
Jose_H_134227
Icon for Nimbostratus rankNimbostratus
Sep 24, 2013

One IP, multiple virtual hosts, multiple domains, multiple wildcard certs

I have one server with multiple domains, and all those domains point to the virtual IP in our bigip.   The problem is that now I need to configure SSL wildcard certs for these domains. Is that eve...
Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Sep 24, 2013

It is absolutely possible, and you have at least three options:

 

  1. Wildcard cert - you'll likely find that this is the most expensive option.

     

  2. SAN or Subject Alt Name cert - like a wildcard but contains a set of names in the subjectAltName section of the x.509. It's generally cheaper than wildcard certs, and you can technically put wildcard subject alt names in a SAN cert. you'll usually find though that a public CA won't allow this.

     

  3. SNI or Server Name Indicator - a TLS extension that allows you to have individual server name certs and the BIG-IP will switch the SSL profile based on what the client is asking for. It requires TLS, so not an option for older clients.