Forum Discussion
Jose_H_134227
Nimbostratus
NimbostratusOne IP, multiple virtual hosts, multiple domains, multiple wildcard certs
I have one server with multiple domains, and all those domains point to the virtual IP in our bigip.
The problem is that now I need to configure SSL wildcard certs for these domains. Is that eve...
Kevin_Stewart
Employee
EmployeeAssigning multiple SSL profiles (and associated certificates) to a VIP is a function of SNI, which you can't do in 9.4.8. You can:
-
Assign a single wildcard certificate to the client SSL profile that encompasses everything, or
-
Assign a single SAN certificate that contains all of the server names you'll need.
Given that your example uses two different top-level domains, you'll be hard-pressed to use a wildcard certificate. Perhaps a single SAN certificate is a better option. The only other significant alternative is separate VIPs with separate (wildcard) certificates.
