By jimShark
I have a load balancer that terminates SSL connections and routes to multiple front end servers.
I need my LB to terminate SSL with a wildcard domain name, at multiple levels, for instance:
https://app.example.com
https://foo.app.example.com
https://bar.app.example.com
...
I have acquired a wildcard certificate for *.app.example.com and installed it on the load balancer.
But I’m not getting any love from the LB. http://app.example.com is not validated by the cert.
It occurred to me that I might be confused about certs. Can *.app.example.com validate for app.example.com as well as foo.app.example.com?
If not, I have a problem, as the LB only lets me select one certificate, so I can’t solve this by adding an addition cert for the higher-level domain.
Is there a way to make this work with the DO LB? Or do I need to suck it up and set up an NGINX server?
This textbox defaults to using Markdown to format your answer.
You can type !ref in this text area to quickly search our full set of tutorials, documentation & marketplace offerings and insert the link!
Heya,
Just came across this answer and decided to write some general guidelines for anyone who comes across this in the future despite the old question.
The wildcard certificate *.app.example.com should cover subdomains like foo.app.example.com and bar.app.example.com, but it would not cover app.example.com. Wildcard certificates only cover the specific level of subdomain they’re issued for. So, your certificate is good for any single subdomain of app.example.com, but not the domain itself.
One common solution is to have two certificates: one for the base domain and one for the wildcard subdomains.
However, your observation is correct. At the moment, DigitalOcean Load Balancers allow you to select only one certificate per Load Balancer. If you need to use multiple SSL certificates, you may need to consider setting up an NGINX server or utilizing an alternative method.
For more detailed information about how SSL certificates work in DigitalOcean Load Balancers, please refer to this DigitalOcean doc.
Hope that this helps!
Become a contributor for community
Get paid to write technical tutorials and select a tech-focused charity to receive a matching donation.
DigitalOcean Documentation
Full documentation for every DigitalOcean product.
Resources for startups and SMBs
The Wave has everything you need to know about building a business, from raising funding to marketing your product.
The developer cloud
Scale up as you grow — whether you're running one virtual machine or ten thousand.
Get started for free
Sign up and get $200 in credit for your first 60 days with DigitalOcean.*
*This promotional offer applies to new accounts only.