Forum Discussion

Frankx's avatar
Frankx
Icon for Altocumulus rankAltocumulus
Mar 29, 2018

2 ssl profiles on a VIP - www.zzz.com and zzz.com

We have a situation where our application doesn't support SAN certs. From what I've read about SNI that address different domains. not www vs nothing. Browsers are now reporting errors. is giving us errors no.

 

Thoughts?

 

Thanks,

 

Frank

 

application delivery
BIG-IP
LTM
security
  • Lee_Sutcliffe's avatar
    Lee_Sutcliffe
    Icon for Nacreous rankNacreous
    Mar 29, 2018

    Hi Frank,

     

    Whilst your application doesn't support SAN certs, F5 does. As SSL is offloaded on to your F5, you don't need to worry about your applications SSL restrictions as you can send traffic encrypted to the application.

     

    Alternatively you can use a wildcard certificate on your virtual server, this would be my personal preference.