I am trying to put a cert on the SSL VPN. All I have access to is wildcard certs. I have already tried and failed, and now I am wondering if I can or if I am doing it wrong.
Yes you can, but you need to access it via FQDN (e.g.: ssl.mydomain.com), not IP address, otherwise the cert is useless.
The IP address will not match the certificate wildcard subject name or alternative subject name. The wildcard certificate cannot be used to authenticate the server by its IP address.
the wildcard certificate will only apply if the method you are connecting to the sslvpn is fqdn based. in this case, you'll have to bind your public ip with fqdn or use FortiDDNS: https://docs.fortinet.com/document/fortigate/7.6.2/administration-guide/685361/ddns
Hi,
You can do this if you add the IP address in the SAN name field.
However it's better to use a FQDN.
User | Count |
---|---|
2561 | |
1357 | |
796 | |
650 | |
455 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2025 Fortinet, Inc. All Rights Reserved.