Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

ACE: Single SSL Cert for two domains with same VIP

At present I have a design that will use individual SSL cert per domain and link both certs to (two or one) serverfarm.

policy-map multi-match popvip_01

class POP_VIP01

loadbalance vip inservice

loadbalance policy POP-POp3_PMT or popPMT1

loadbalance vip icmp-reply

ssl-proxy server GINPOP_SSLPROXY

connection advanced-options TCP_PARAM_Y

class POP3_VIP02

loadbalance vip inservice

loadbalance policy POP-POp3_PMT or POPPMT2

loadbalance vip icmp-reply

ssl-proxy server GINPOP3_SSLPROXY

connection advanced-options TCP_PARAM_Y

however,

if I can get one single certificate to process both pop and pop3 domains, that use the same VIP/port, and if this will work with ACE, i'm inclined to design using this alternative.

ie,

pop.mydomain.com = 10.10.10.1 995

pop3.mydomain.com = 10.10.10.1 995

Any suggestions would be appriciated.

1 ACCEPTED SOLUTION

Accepted Solutions
Bronze

Re: ACE: Single SSL Cert for two domains with same VIP

Hello,

In order to achieve this then you will need to order a wildcard certifictae ie

*.mydomain.com

These certificates are more expensive and so you will probably find it cheaper to buy two certificates than one wildcard certificate.

Regards

1 REPLY
Bronze

Re: ACE: Single SSL Cert for two domains with same VIP

Hello,

In order to achieve this then you will need to order a wildcard certifictae ie

*.mydomain.com

These certificates are more expensive and so you will probably find it cheaper to buy two certificates than one wildcard certificate.

Regards

167
Views
5
Helpful
1
Replies
CreatePlease to create content