Skip to main content
Solved

Middleware SSL works on hostname, not on FQDN


Forum|alt.badge.img+9

Hi,

I have an apps 10 server which we have installed new SSL certs on - these contain the normal host name eg. server1, and the fully qualified name e.g. server1.example.com.  We can access IFS middleware using the host name (server1) but not the fully qualified name (server1.example.com), we insted get a “Forbidden” warning.  Where is this controlled in the ifs mw configuration, and how to I get IFS to answer to both?

Best answer by Ben Monroe

Hi Hypervox,

This is typically handled automatically. Is your “server1” in a (Active Directory) domain called “example.com”? Does your DNS actually resolve this correctly?

On the “System Access Setup” screen, if you use SSL Passthrough, you can specify a secondary FQDN. This is intended for external access via a load balancer FQDN, which may differ from the actual server name.

More precisely, this is controlled by Oracle HTTP Server configuration. While the configuration files can be edited manually, this is not recommended or supported as any such changes will be overwritten at the next re-configuration.

Best regards, Ben

View original
Did this topic help you find an answer to your question?

3 replies

Forum|alt.badge.img+15
  • Superhero (Employee)
  • 168 replies
  • Answer
  • May 22, 2023

Hi Hypervox,

This is typically handled automatically. Is your “server1” in a (Active Directory) domain called “example.com”? Does your DNS actually resolve this correctly?

On the “System Access Setup” screen, if you use SSL Passthrough, you can specify a secondary FQDN. This is intended for external access via a load balancer FQDN, which may differ from the actual server name.

More precisely, this is controlled by Oracle HTTP Server configuration. While the configuration files can be edited manually, this is not recommended or supported as any such changes will be overwritten at the next re-configuration.

Best regards, Ben


Forum|alt.badge.img+9
  • Author
  • Hero (Customer)
  • 78 replies
  • May 22, 2023

Thanks Ben,

That worked - sort of.  It only responds now on the FQDN (server1.example.com), I now get “forbidden” on the hostname (server1).  Is that the expected behaviour?


Forum|alt.badge.img+15
  • Superhero (Employee)
  • 168 replies
  • May 23, 2023

Hi Hypervox,

Yes, typically an environment is accessed via the FQDN URL.

Best regards, Ben


Reply


Cookie policy

We use cookies to enhance and personalize your experience. If you accept you agree to our full cookie policy. Learn more about our cookies.

 
Cookie settings