Quantcast
Channel: AskF5 Knowledge Base - Recent Additions and Updates
Viewing all articles
Browse latest Browse all 18852

General Solution: The BIG-IP system only allows DNS names when configuring the subject alternative name extension for an SSL certificate

$
0
0
(SOL13470) Starting in BIG-IP version 11.1.0, you can use the Configuration utility or Traffic Management Shell (tmsh) to create SSL certificates, keys, and CSRs that contain the subject alternative name (SAN) extension. However, the BIG-IP system only allows DNS names when configuring the SAN SSL certificates, keys, and CSRs. Per RFC5280, the SAN extension allows certain values, such as email addresses, DNS names, IP addresses, and URIs, to be bound to the subject of the SSL certificate. For example, a SA

Viewing all articles
Browse latest Browse all 18852

Trending Articles