我正在为一对测试服务器（2008 R2、IIS7）中的一个请求我的第一个 SSL 证书。我们的 CA 不是 AD 的一部分，因此我发现我需要执行“请求互联网证书'。不过，该链接并不是很有帮助，因为它没有告诉您要在框中放入什么。我很确定我对除了“通用名称”框之外的所有内容都满意。我想我需要将服务器名称放在这里，但我不确定。
通常，我在站点中使用主机标头，以便我的网络人员可以为我提供负载平衡，或者至少在一对服务器之间进行故障转移。我可以在这里这样做吗？如果可以，我是否需要填写主机标头名称或服务器名称？
I'm requesting my first SSL certificate for one of a pair of test servers (2008 R2, IIS7). Our CA is not part of AD so I've worked out that I need to do the 'request an Internet certificate'. That link isn't very helpful, though, because it doesn't tell you what to put in the boxes. I'm pretty sure I'm okay with everything except the 'Common name' box. I think I need to put the server name in here but I'm not sure.
Normally, I use host-headers with my sites so that my networking guys can provide me with load-balancing or, at least, fail-over across a pair of servers. Can I do that, here, and if so, do I fill in the host-header name or the server name?
发布评论
评论（1）
答案很复杂，我不想弄错，以防其他人读到这篇文章。可以说，我正在考虑在证书请求上使用 subjectAltName，以便使用主机标头地址的人仍然可以访问该网站而不会收到证书警告。
The answer is complicated and I don't want to get it wrong, in case anyone else reads this. Suffice to say, I'm looking at using subjectAltName on the certificate request so that people who use the host-header address will still get to the site without getting a certificate warning.