SSL inheritance on DNS CNAME
If 开发者_如何学PythonI create an SSL Certificate for secure.mydomain.com
and I create the following DNS record:
alias.otherdomain.com CNAME secure.mydomain.com
So that alias.otherdomain.com
points to secure.mydomain.com
, will the SSL certificate be valid if I surf to https://alias.otherdomain.com
?
Thanks
No, it won't. The browser (or other application) will request alias.otherdomain.com and will compare this particular name to contents of presented certificate. The application knows nothing about your DNS aliases.
Update: Donal Fellows reminds me about multidomain (including wildcard) certificates. Some (but not all) CAs offer such certificates so if you buy one of those, then your scheme will work. But otherwise my answer applies.
精彩评论