topic Re: SSL Inbound Decryption and Certificate with Wildcard mask in General Topics

SSL Inbound Decryption and Certificate with Wildcard mask

MP18 — Sun, 19 Apr 2020 04:58:16 GMT

Hi Everyone,

Hope everyone is staying home and Safe.

I need to import the certificate and the private keys to the firewall from the web servers.

We have this certificate say

*.city.ca and this is associated with few websites like

maps.city.ca. or recruiting.city.ca

All these urls have same public IP address say 209.x.x.x

When I import the certificate *.calgary.ca to PA. with private key it should be fine right?

Also for decryption policy I will put destination address as 209.x.x.x and then PA should decrypt the traffic for all the urls as they point to

same IP address right?

Regards

Re: SSL Inbound Decryption and Certificate with Wildcard mask

BPry — Sun, 19 Apr 2020 05:12:43 GMT

@MP18,

Everything you just described should work perfectly fine without issue as long as you match the ciphers with the server so that you don't have a cipher mismatch.

Re: SSL Inbound Decryption and Certificate with Wildcard mask

MP18 — Sun, 19 Apr 2020 05:18:17 GMT

Hi BPry,

Many thanks for confirming this as it is good to confirm with you as I am going to do this change is next few days.

Best Regards