CSS11506 + wildcard ssl cert ?

dclee · ‎05-15-2007

We have a need to terminate multiple SSL websites on our CSS. So name1.test.com

name2.test.com, name3.test.com etc. The problem I have found is that I need to burn 1 public VIP per SSL connection b/c they all need to use tcp 443 inbound and point to their respective cert on the CSS. Is there anyway to possibly generate a wildcard cert that matched only the last part of our domain name ( events.test.com = *.test.com ) and then get away with using only 1 VIP for the multiple sub domains ??

Thanks for your help.

Cheers

Dave

paulsa3598 · ‎05-24-2007

Yes this is possible. We are currently using the same design.

http://www.cisco.com/en/US/products/hw/contnetw/ps792/products_configuration_guide_chapter09186a0080579f6b.html

Please rate.

dclee · ‎05-25-2007

Thanks, I'll have a look at the links.

Cheers

Dave

dclee · ‎06-06-2007

Thanks, any chance of posting or emailing me a sanitized config. I am still having a hard time getting this to work.

Cheers

Dave