topic Re: Query on wildcard certificate in General Topics

Query on wildcard certificate

Farzana — Mon, 17 Sep 2018 04:29:46 GMT

Hello,

Our wildcard certificate doesn't have any SANs associated with it.

Is this a requirement for usage of a wildcard cert?

Can I use the same certificate for both web management and GP?

Thanks in advance.

Re: Query on wildcard certificate

Remo — Mon, 17 Sep 2018 16:01:37 GMT

@Farzana

The cert only needs to contain the wildcard entry also as SAN. Otherwise you will get cert errors.

--> because of RFC 2818

If a subjectAltName extension of type dNSName is present, that MUST be used as the identity. Otherwise, the (most specific) Common Name field in the Subject field of the certificate MUST be used. Although the use of the Common Name is existing practice, it is deprecated and Certification Authorities are encouraged to use the dNSName instead.

Re: Query on wildcard certificate

Remo — Mon, 17 Sep 2018 16:05:37 GMT

... and yes it is possible to use the same cert for management web UI and GlobalProtect.