We have a small managed infrastructure at our workplace.
The network in its simplest form:
Internet (no-ip for DNS) >> (public ip) Firewall (private ips 192.168.X.X/24(NAT)) >> Reverse Proxy >>> Web Servers
Right now, when clients connect to our web services, they must do so via HTTP. We are working towards implementing HTTPS (SSL). Due to the nature of our setup, we use a wildcard SSL certificate.
Does the wildcard SSL certificate only need to be installed on the reverse proxy server? It handles all requests to our web servers (of which there are at least 10).
Does the wildcard SSL certificate need to be installed on each web server behind the reverse proxy?
Would there be a need to install or implement the wildcard SSL cert on the firewall?
Thanks in advance for any feedback!