cancel
Showing results for 
Search instead for 
Did you mean: 

Multiple certs with one External IP?

SOLVED
davidg_
New Contributor

Multiple certs with one External IP?

I trying to setup certs for different hostnames for External users using 1 external IP. I see how it does it with Virtual ports but that would mean I would have to map 1 public IP to 1 virtual port. I only want to use 1 public IP for multiple certs. I have 2 sign-in's right now. 1) *.abc.com 2) sec.def.com both are using public IP x.x.x.100

Currently I the wildcard cert associated with the external port and of course *.abc.com works fine and I get a cert error for sec.def.com. DNS wise, both of these domains are pointing to the same public IP right now x.x.x.100

How do I use multiple certs in this scenario?

1 ACCEPTED SOLUTION

Accepted Solutions
Tigeli_
Occasional Contributor

Re: Multiple certs with one External IP?

You can't use multiple certs for one IP-address, it's a technical restriction. The SSL-encrypted tunnel is setup before the IVE & client start speaking HTTP to each other. So IVE has to bind cert's per IP-address.

View solution in original post

3 REPLIES 3
Tigeli_
Occasional Contributor

Re: Multiple certs with one External IP?

You can't use multiple certs for one IP-address, it's a technical restriction. The SSL-encrypted tunnel is setup before the IVE & client start speaking HTTP to each other. So IVE has to bind cert's per IP-address.

View solution in original post

imtravis_
Contributor

Re: Multiple certs with one External IP?

Tigeli is correct, one Cert per IP (and/or VIP).
davidg_
New Contributor

Re: Multiple certs with one External IP?

yeah, that's what I figured, thanks