For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Sanal_Babu's avatar
Sanal_Babu
Icon for Altostratus rankAltostratus
Jan 01, 2018

2 URL's on same vip with wildcard certificate

Here is the existing setup. VIP and pool members listening on 443. Wild card certificate on the client ssl. In server profile "abc.com as server name.   Requirement:   One more URL to be added...
application delivery
LTM
Hannes_Rapp_162's avatar
Hannes_Rapp_162
Icon for Nacreous rankNacreous
Jan 01, 2018

If all works with 

abc.com
right now, and you already terminate clientssl with 
*.abc.com
certificate, no changes on BigIP LTM are required to add support for 
xyx.abc.com
. They just create new DNS A record to point xyx.abc.com to same VIP as abc.com and voila!

Serverssl profile has no domain-aware significance. It is used to enable BigIP act as a SSL/TLS client so the traffic to Pool Member will be encrypted before it's forwarded downstream.

nitass's avatar
nitass
Icon for Employee rankEmployee
Jan 01, 2018

if i do not misremember, serverssl profile does not forward server name indicated from clientside to serverside. so, can you try something like this?

 

Modifying serverside SSL profile based on hostname for SNI (Kai Wilke's comment) https://devcentral.f5.com/s/feed/0D51T00006i7eN3SAI