开发者

SSL inheritance on DNS CNAME

开发者 https://www.devze.com 2023-04-02 00:14 出处:网络
If 开发者_如何学PythonI create an SSL Certificate for secure.mydomain.com and I create the following DNS record:

If 开发者_如何学PythonI create an SSL Certificate for secure.mydomain.com and I create the following DNS record:

alias.otherdomain.com CNAME secure.mydomain.com

So that alias.otherdomain.com points to secure.mydomain.com, will the SSL certificate be valid if I surf to https://alias.otherdomain.com ?

Thanks


No, it won't. The browser (or other application) will request alias.otherdomain.com and will compare this particular name to contents of presented certificate. The application knows nothing about your DNS aliases.

Update: Donal Fellows reminds me about multidomain (including wildcard) certificates. Some (but not all) CAs offer such certificates so if you buy one of those, then your scheme will work. But otherwise my answer applies.

0

精彩评论

暂无评论...
验证码 换一张
取 消

关注公众号