Layer7 API Management

  • 1.  CN name match FQDN

    Posted Sep 18, 2017 09:11 PM

    In general how could we enable at ssg ,the client request url of fqdn match with the certificate CN?



  • 2.  Re: CN name match FQDN

    Broadcom Employee
    Posted Sep 19, 2017 02:45 PM

    Hello sharathbabu yeramalla,

     

    Are you able to give us a little more context on this question?  Is the a particular error you are receiving?



  • 3.  Re: CN name match FQDN

    Broadcom Employee
    Posted Sep 19, 2017 07:33 PM

    I think the hostname validation is on client side, it's the default behavior for many browsers, if the hostname doesn't match the cert CN, many browsers will give you a warning, and you have to manually trust the cert.

    If you're talking about the outbound connection of gateway, I remember the gateway by default should raise an error if the hostname and cert CN are not matched.