SSL Certs

WLS-ITGuy

I am sure this a N00b question but here goes anyway.

With wildcard certs, can I install them on multiple servers or does it have to be one server?

Does it matter that www.site1.org is at x.x.x.1 and www.site2.org is at x.x.x.2?

travisdh1

Uhm, a wildcard cert is good for all subdomains on a single domain. So site1.org, www.site1.org, chat.site1.org, and email.site1.org could all use the same cert. www.site2.org would need a different cert, because it's a different domain name.

WLS-ITGuy

OK. So if I have 3 servers that have the following:

pbxserver.site1.org at x.x.x.1
secserv.site1.org at x.x.x.2
weather.site1.org at x.x.x.3

I could use one wildcard cert for all three servers, correct?

travisdh1

@wls-itguy said in SSL Certs:

OK. So if I have 3 servers that have the following:

pbxserver.site1.org at x.x.x.1
secserv.site1.org at x.x.x.2
weather.site1.org at x.x.x.3

I could use one wildcard cert for all three servers, correct?

Yes.

WLS-ITGuy

@travisdh1 said in SSL Certs:

@wls-itguy said in SSL Certs:

OK. So if I have 3 servers that have the following:

pbxserver.site1.org at x.x.x.1
secserv.site1.org at x.x.x.2
weather.site1.org at x.x.x.3

I could use one wildcard cert for all three servers, correct?

Yes.

Not sure why my brain wasn't grasping that. Maybe I need more whiskey in my coffee this morning

Thanks!

travisdh1

If we're working from your example here @WLS-ITGuy, I'd put a reverse proxy in front of them all. @JaredBusch has a couple good guides on actually setting this up. https://mangolassi.it/topic/16651/install-nginx-as-a-reverse-proxy-on-fedora-27

Obsolesce

@wls-itguy said in SSL Certs:

OK. So if I have 3 servers that have the following:

pbxserver.site1.org at x.x.x.1
secserv.site1.org at x.x.x.2
weather.site1.org at x.x.x.3

I could use one wildcard cert for all three servers, correct?

IP addresses have nothing to do with it.

WLS-ITGuy

@obsolesce said in SSL Certs:

@wls-itguy said in SSL Certs:

OK. So if I have 3 servers that have the following:

pbxserver.site1.org at x.x.x.1
secserv.site1.org at x.x.x.2
weather.site1.org at x.x.x.3

I could use one wildcard cert for all three servers, correct?

IP addresses have nothing to do with it.

I knew that - I was just making sure people knew they were indeed on 3 separate servers.