Forum Discussion

Chris_Phillips's avatar
Chris_Phillips
Icon for Nimbostratus rankNimbostratus
Sep 22, 2006

change ssl cert common name

Hi,

 

 

i have a virtual server that is used to proxy http data to various nodes dependent on the hostanme in the http header. i need to present an clientssl service internally and ssl isn't my strong point. As we have multiple CNAME's pointing at a single service, if we just attach a default ssl cert the common name in the cert doesn't match the hostname in the http request, so ie whines. is it possible to use the same certificate and clientssl profile but dynamically change the common name on the cert to match the http::host value at the start of each connection? i've been searching about on the forum and i'm seeing encouraging phrases, but not in a context that seems relevant. this request might not even make too much sense in the world of ssl certs, but as above, i'm only just having to look into them now.

 

 

thanks

 

 

chris