Is it possible to have SSL certificate for IP address, not domain name?

后端 未结 7 1781
南旧
南旧 2020-11-22 15:53

I want my site to use URLs like http://192.0.2.2/... and https://192.0.2.2/... for static content to avoid unnecessary cookies in request AND avoid

7条回答
  •  轻奢々
    轻奢々 (楼主)
    2020-11-22 16:40

    The C/A Browser forum sets what is and is not valid in a certificate, and what CA's should reject.

    According to their Baseline Requirements for the Issuance and Management of Publicly-Trusted Certificates document, CAs must, since 2015, not issue certificats where the common name, or common alternate names fields contains a reserved IP or internal name, where reserved IP addresses are IPs that IANA has listed as reserved - which includes all NAT IPs - and internal names are any names that don't resolve on the public DNS.

    Public IP addresses CAN be used (and the baseline requirements doc specifies what kinds of checks a CA must perform to ensure the applicant owns the IP).

提交回复
热议问题