Hello,

I have 2 solaris 10 systems which are behind a load balancer serving 50% requests each. Both systems are installed with an application which run apache http server on port 80 and 443. both systems use the same virtual hostname like (app.domain.com). So when users hit http://app.domain.com in their browsers the get the site served by listeners from any of the systems.

now I want add a CNAME so that if users hit http://application.domain.com then site should work for them. I am sure it will work for http.

How about https://application.domain.com?

I wonder what CN should be used to generate CSR for the both systems running apache web server with same Virtualhostname(which here is app.domain.com and I don't want to change this to application.domain.com)

I guess both system`s apache should have same SSL certificate. How is this generally done for systems behind load balancer.

If I am not wrong, there will also be ssl key and Certificate required on Load Balancer Device itself.

Can we have a certificate which can be used for 2 hostnames at same time like app.domain.com and also application.domain.com or one can use *.domain.com wild card certs on all 3 systems or just copying one ssl certificate received from CA generated by one system's CSR can be copied to all 3 systems (2 server + 1 load balancer) with corresponding SSL server key?

Other than this I have a general question:
I have a ssl certificate for a hostname valid for 2 more years but I am putting a new hardware and new installation of web server, can I just transfer the old key and certificate to new server while I want new server take over the old one. Please let me know


Thanks

I can only answer for this question, which is YES YOU CAN.