5 replies to this topic

[Sajeev Chandrapragasam]

Hi All,

 

If i'm creating a certificate for my web server, while giving common name for certificate the FQDN is should be Barracuda box FQDN or the web server FQDN? 

 

 

[Kaushik Thirumurthy]

Hello Sajeev,

 

If you are planning to import this certificate on the Load balancer and use if for a HTTPS service, then it should be having the CN corresponding to the Service FQDN.

 

If this certificate would be just used on your real server, then it can be with real server's FQDN.

 

Please let us know if you have any questions

 

Regards,

Kaushik

[Sajeev Chandrapragasam]

Hello Sajeev,

 

If you are planning to import this certificate on the Load balancer and use if for a HTTPS service, then it should be having the CN corresponding to the Service FQDN.

 

If this certificate would be just used on your real server, then it can be with real server's FQDN.

 

Please let us know if you have any questions

 

Regards,

Kaushik

 

So for the first instance. Do we have to give Load balancer box's FQDN?

[Kaushik Thirumurthy]

If this certificate is to be used for a service on the Load balancer, then it should be created with CN as FQDN of the service on the load balancer.

 

Regards,

Kaushik

[Sajeev Chandrapragasam]

If this certificate is to be used for a service on the Load balancer, then it should be created with CN as FQDN of the service on the load balancer.

 

Regards,

Kaushik

 

 

If we have the certificate for Web Sever, Can we use that in Load Balancer Service ?

[Kaushik Thirumurthy]

This would work fine provided FQDN of webserver and service on the load balancer are same. Otherwise, you would encounter an SSL certificate warning while accessing the website.

 

If the FQDN is different on server and service and if you would like to use the same certiifcate then

 

1) you can get a SAN certificate signed with these hostnames. As you might be aware, SAN certificates can have multiple hostnames

 

Or

2) a wildcard certificate, if the domain name is same on both web server and service on the ADC.

 

Thanks,

Kaushik.