Is it possible to use single ssl certificate for multiple server farm with different FQDN?

Hi
We generated the CSR request for versign secure site pro certificate
/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Table Normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-priority:99;
mso-style-qformat:yes;
mso-style-parent:"";
mso-padding-alt:0in 5.4pt 0in 5.4pt;
mso-para-margin:0in;
mso-para-margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-ascii-font-family:Calibri;
mso-ascii-theme-font:minor-latin;
mso-fareast-font-family:"Times New Roman";
mso-fareast-theme-font:minor-fareast;
mso-hansi-font-family:Calibri;
mso-hansi-theme-font:minor-latin;}
SSL Certificate for cn=abc.com considering abc.com as our major domain. now we have servers in this domain like www.abc.com, a.abc.com , b.abc.com etc. we installed the verisign certificate and configured ACE-20 accordingly for ssl-proxy and we will use same certificate gerated for abc.com for all servers like www.abc.com , a.abc.com , b.abc.com etc. Now when we are trying to access https//www..abc.com or https://a.abc.com through mozilla , we are able to access the service but we are getting this message in certfucate status " you are connected to abc.com which is run by unknown "
And the same message when trying to access https://www.abc.com from Google Chrome.
"This is probably not the site you are looking for! You attempted to reach www.abc.com, but instead you actually reached a server identifying itself as abc.com. This may be caused by a misconfiguration on the server or by something more serious. An attacker on your network could be trying to get you to visit a fake (and potentially harmful) version of adgate.kfu.edu.sa. You should not proceed"
so i know as this certficate is for cn=abc.com that is why we are getting such errors/status in ssl certficate.
Now my question is
1. Is is possible to remove above errors doing some ssl configuration on ACE?
2. OR we have to go for VerisgnWildcard Secure Site Pro Certificate for CSR generated uisng cn =abc.com to be installed on ACE and will be used for all servers like www.abc.com , a.abc.com etc..
Thanks
Waliullah

If you want to use the same VIP and port number for multiple FQDNs, then you will need to get a wildcard certificate. Currently, if you enter www.abc.com in your browser, that is what the browser expects to see in the certificate. And right now it won't beause your certificate is for abc.com. You need a wildcard cert that will be for something like *.abc.com.
Hope this helps,
Sean

Similar Messages

Use public SSL certificate for WebAccess 8 on SLES10 Linux S

Currently my WebAccess 8 server is running on NetWare. I want to move my WebAccess to SLES10 SP3 server and use public SSL certificate from third-party on SLES 10. I think this is just to get apache to use the public cert on SLES 10 Linux server and nothing to change on WebAccess, right?
Thanks in advance.
Wilson

wilsonhandy wrote:
> Currently my WebAccess 8 server is running on NetWare. I want to move
> my WebAccess to SLES10 SP3 server and use public SSL certificate from
> third-party on SLES 10. I think this is just to get apache to use the
> public cert on SLES 10 Linux server and nothing to change on
> WebAccess, right?
Yeah, it's purely an Apache config. No need to do anything to
WebAccess just to get SSL working.
Novell Knowledge Partner
Enhancement Requests: http://www.novell.com/rms

Can we use single DB Adapter for multiple tables

Hi,
I have 3 tables. ONE is the Master table and other 2 tables having Primary and foreign key relationships with the Master Table.
Data is enter in the Tables 2 & 3 (based on Master Table Primary key)
I have to use a DB Adapter in BPEL Process which will be in Transaction (what type of Transaction is Best in such a Scenario).
- How do i implement it in BPEL.
- Can i use a Single DB Adapter for Multiple Tables ? (*Views* should not be created for tables 1, 2 & 3),
as we want to avoid using multiple DB Adapters, as in future Tables may increase or decrease...
- while in Transaction if Table 2 fails in Inserting / Updating, it should roll back on error and also if Table 3 fails in Inserting / Updating, it should roll back table 2 and Table 3.
- how access to concurrent users is maintained / managed in such a scenarios.
But everything should be done using Single DB Adapter without creating a separate view.
Is this Possible in BPEL..
If not, How do we design, Implementation such a BPEL Process in Transaction with a best in Performance (both BPEL Process & DB Resources)
thanks in advance
thanks & regards,
anvv sharma

Hi,
Thanks for your quick response.
I have few quires.
If we use PL/SQL, how do we implement transaction and Exception Handling appropriately based on the Error / Exception in BPEL.
If the Table 2 or Table 3 gives out Error / Exception, i have to handle it separately and intimate accordingly.
Suppose, if Table 2 got Error / Exception - Error Handling would be 'Roll back due to error in Table2'
Thanks & regads,

Use Homepage SSL certificate as exchange server certificate?

the certicate needs to match the fully qualified domain name that you connect against.
so if the web site uses www.domain.de and the echange server's OWA/Activesync is owa.domain.de it wont match and you'll get errors. However if the SSL cert is wildcard to *.domain.de you'll be OK.

Hi there,
im a little certificate dau
i have a certificate for our homepage which certifies on "Domain123.de".
Is it possible to use this certificate for our mail server? (exchange 2007)
The mail domain is "[email protected]"
Our AD Domain is "Domain456.local"
I hope you can help me here.
Heres some bacon to attract the pros
This topic first appeared in the Spiceworks Community

Using existing SSL Certificate for Web Dispatcher

Hi,
We've registered a SSL certificate with wildcard option via GlobalSign. The history of this process is as below:
1. We created a Certificate Request with IIS and send it to GS (GlobalSign).
2. They send us the certificate file Globalsign Primary Secure Server CA and Globalsign Server Sign CA files.
3. Import all ceritifcates into IIS and then exported the certificate into a Cert.pfx file.
4. By using this file, we are able to import the SSL certificate into J2EE WAS 640 of Portal system.
5. Now we want to use same certificate to establish a web dispatcher installation as intermediate server for internet access.
Web Dispatcher documentations says to create a pse and req file with sapgenpse program and then send it to CA (here globalsign) to get a certificate.
But when we asked GS, they told us to use the certificate they send us before. They cannot create a certificate file for the ourput of web dispatcher. It will be billed us if we persist.
So, we have to find a way to use the existing certificate to enable SSL of Web Dispatcher.
Any idea?

Hi Huseyin,
I also have the same scenario. We also want to use the same certificate from verisign for our webdispatcher.
Do you know how to do. Can you help me.
Thanks and Regards,
Sailesh K

Using an SSL certificate for Exchange 2013

Hi,
I am not sure if this is the correct forum to post this question in.
Basically we are migrating from Exchange 2007 to Exchange 2013. Our 2013 machines have both roles installed and do everything. They are configured in a DAG. We have no hardware load balancing/reverse proxy or etc. inside or outside.
We use an alias of mail.domain.com to connect to OWA/ActiveSync and etc from the Internet.. this alias would point to mail1.domain.com which is the IP of the first Exchange 2013 server.
If that server were to break, we would point the alias of mail.domain.com to mail2.domain.com which is the IP of the second Exchange 2013 server. Clients would not need any changes before they started connecting to the remaining mail server (eventually)
and email would continue.
I know this is not an ideal setup, but for now it is what we have and would keep us running in the event of server failure.
My question is, when I request a certificate, do I need two of them with mail1.domain.com and mail2.domain.com as their primary and SAN of mail.domain.com OR do I request one certificate with mail.domain.com as the primary host and SAN of mail1.domain.com
and mail2.domain.com (and install the one certificate on both servers).
I want to include mail1.domain.com and mail2.domain.com as this can be helpful for testing and/or during migration.
I hope that makes some sense and appreciate any help people can offer.
Thanks!

You do not need server names in the certificate if you are using mail.domain.com only in all of the URL settings. You will want autodiscover.domain.com, however.
Consider configuring a different internal and external name for Outlook Anywhere so that Outlook knows whether it is connecting from the Internet or internally. For internal Outlook Anywhere, use a name that you don't publish to the Internet.
For example, use mail.domain.com for everything except internal Outlook Anywhere, use mailinternal.domain.com. Put mail.domain.com, mailinternal.domain.com and autodiscover.domain.com in the certificate.
Ed Crowley MVP "There are seldom good technological solutions to behavioral problems."

Using same Wildcard certificate on multiple SAP systems with same domain name.

Hello All,
Need urgent help.
I have a WILDCARD SSL certificate in pfx format. I also have individual root certificate , primary certificate in text form.
The certificate mentioned above is already active in one of our portal.
We want the same certificate on ECC Production.
What are the steps to import this certificate in STRUST?
I believe no certificate response needs to be imported.
I have a certificate response provided by Verisign. But STRUST says- cannot import certificate response'
Please help.

Hi,
This is what i did for installing wildcard certificates:
On the OS of the sap server, log in with the sapadm account.
Open a command prompt:
make a backup of your sec directory in drive:\usr\sap\<SID>DVEBMGS00\ (just to be sure)
cd to drive:\usr\sap\<SID>DVEBMGS00\exe
>sapgenpse.exe import_p12 =p SAPSSLS.PSE location\to\the\certfile.pfx
It will ask you for the pin, and to overwrite the file, answer yes.
Now copy the new SAPSSLS.PSE to a desktop that has sapgui
Login with the sapgui and run transaction strust
Select import from the PSE menu and open the SAPSSLS.PSE
Then again goto PSE menu and select Save As
I saved it twice, once in System PSE and then again in SSL Server
For me SSL is now working without problems on a couple of servers.
-small update-
You can check internal servers using the certificate utility from digicert https://www.digicert.com/util/
It has the option to specify port numbers, usefull for internal web services.
Regards,
Rolf

SSL certificates for multiple websites

I am having problems with websites recognizing the SSL certificate assigned to said site. For example, I have three secure websites; (1) x.abc.com, (2) y.abc.com, and (3) z.abc.com. All are setup for SSL with associated SSL certificates from a signed authority. However, when I browse to said sites, I receive an SSL mismatch error pertaining to the domain name. For whatever reason, two of the sites want to use the main site SSL certificate.
I have verified that the sites are setup correctly with the proper SSL certificate and restarted web services. Any ideas?
Thanks!

You do this by IP Aliasing the machine
Oh, you were referring to IP Aliases. Sorry. I interpreted your comment as meaning Server Aliases within Apache (where multiple hostnames map to the same virtual host configuration).
My bad.
So we're both right - you need multiple IP addresses on your server (either by duplicating the inteface in System Preferences, or through IPAliases.conf) and you need to bind one SSL site to each IP address (although you could also use different port numbers on the same IP address in Apache).
If you're using NAT you still need multiple public IP addresses that forward to each of the IP Aliases (or virtual hosts).

How to use single web form for multiple secure zone signup?

I have multiple secure zones in my website. I want to sell membership of secure zones to users of my website. I want, users signup for multiple secure zone of their choice and submit payment. Is it possible if can you please explain a bit or refer me to an doc about it.
Thanks a lot for your time,

I realize this isn't likely, but do you know of a way to allow the user to select the secure zone to be registered (e.g. from a list of multiple secure zones or entering ID of one sz into a text input) from within a single web form? I wonder if this can be passed in through a parameter in the action URL or through a special system field.
Thanks

Want to use single oracle home for multiple database releases

Hi,
I have following 3 different databases.
Oracle7 Server Release 7.3.4.4.0
Oracle Database 10g Enterprise Edition Release 10.2.0.3.0
Oracle Database 10g Enterprise Edition Release 10.2.0.3.0 - 64bit
I want to access these databases using single oracle home. Please advise which client version I have to install to access these. I tried using Oracle Release 9.2.0.1.0 client but I am not able to connect to oracle 7 by using this.I am ready to have multiple oracle homes.But what client version I have to install and where can I get it.Your help will be highly appreciated.

... and 7 is using oracle 8.1.7 client.From your sales representative. 8i is no longer available for downloading,because desupported since many years.
Werner

HCM Processes and Forms : Using single Form Scenario for Multiple Countries

Hi ,
I have a requirement to design a HCM P&F form ( Single Process, Single Form Scenario ) to support multiple countries. Form fields should be visible/invisible based on the country ( derived from the login Manager). please help me with the following questions.
1. Is it right way to enable/disable the fields in the same form scenario for multiple countries ( Approx. 20-25 countries)
2. Is there any limitation to no. of fields on the form? does the form performs well with multiple dynamic conditions?
3. If yes, what is the best way to do this? through Java Script / Back end Generic Service?
Thanks in Advance,
VR.

Hi VR,
1. Is it right way to enable/disable the fields in the same form scenario for multiple countries ( Approx. 20-25 countries)
-You can use same form scenario or process for multiple countries if you are using fields based on international structure HCMT_BSP_PA_XX_R*. If you intend to use country specific fields then you may like to use different form scenario for different countries.
2. Is there any limitation to no. of fields on the form? does the form performs well with multiple dynamic conditions?
- As such there is no limiation for the fields.Yes, form performs well with multiple rule configurations.
3. If yes, what is the best way to do this? through Java Script / Back end Generic Service?
I interpret you would like to derive & show fields based on same backend logic, in that case you should generic service.
If you want to show fields based on manager's logon then you should also use authorization BAdi.
Regards
Pooja

Upgrade SSL Certificate for Exchange Server

Hi Folks,
I need to upgrade the SSL certificate on my Exchange Server, so he can negotiate encryption and authorization to an upstream SMTP Smart Host. This means that the certificate I need is not necessarily a server certificate, because in this scenario Exchange
Server is acting as a client to the upstream SMTP Smart Host. I have openssl at my disposal, so making the certificate in not a problem but installing it in the correct location and testing that I've done what I think I've done is.
Thanks for the help,
Chris.
Thanks for the help,
Chris.

Hi,
Please just make sure the primary certificate in your Exchange server with
SMTP service is valid, trusted by your SMTP smart host.
Thanks,
Winnie Liang
TechNet Community Support

Is it possible to run single workflow instance for multiple item changed or created?

I have created a SharePoint Designer 2010 approval workflow and I am starting this workflow on item created and modified . Now when I am adding and updating multiple items it is starting workflow for each item but I want to start only one workflow for all items.
I think it is possible in workflow 2013 but i want to use in
workflow 2010.
Is this possible? if yes then how?

Hi Resham,
From your description, my understanding is that you want to only start a workflow instance when multiple items are added or updated.
Per my knowledge, if we set workflow start on item created or modified, when we add or update multiple items, SharePoint will create a workflow instance for each item, it is unable to just create an instance for multiple items. It is same
between SharePoint 2010 workflow and SharePoint 2013 workflow.
You said it is possible in workflow 2013, do you have any references?
Thanks,
Wendy
TechNet Community Support
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact
[email protected]

Use single sign on for multiple portal domains

Is it possible for a user to sign on once to a domain, and then be able to access other domains. What I'm trying to do is have one user registration page/login page, but use different portal server domains to present different sites, while at the same time having a type of single sign on, once a user has entered his credentials. Thus my registration process will create a new ldap user in an external directory, and i can then just point all the different domains to that External Ldap directory.

I wouldn't recommend this because it would affect performance plus there are potential other issues like conflict that you would run into ..
Everytime a user logs into a new session is created for him and this means a user might have multiple sessions on the server. The cookie that is also set is dependent on per portal domain so it might not work ..
An alternative approach might be to have multiple roles and then customize the role for different views. You can modify the membership code in such a way that based on certain criteria you can assign him to a particular role, equivalent to your domain. However the problem could be if you want to provide delegated admin, currently the delegated admin is only at a domain level.

How to use single JSP page for multiple users.

Hi ,
I am doing messenger kind of program using JSP and tomcat server.
When i type message it is showing in the some div. If some other person request for the same page by giving my IP address and jsp page, he should able to see what i have typed on page so far.
how can i do that one . can any one guide me .
Thanks in advance.

SuneelGoodatJava wrote:
Hi ,
I am doing messenger kind of program using JSP and tomcat server.
When i type message it is showing in the some div. If some other person request for the same page by giving my IP address and jsp page, he should able to see what i have typed on page so far.
how can i do that one . can any one guide me .
Thanks in advance.HTTP is a request/response protocol. You can't do what you're suggesting without "pushing" what you type to all the other users. That's not the way HTTP works. Maybe an applet and servlet.
%

Is it possible to use single ssl certificate for multiple server farm with different FQDN?

Similar Messages

Maybe you are looking for