Forum Discussion
El_Jefe
Jul 11, 2011Nimbostratus
Append FQDN to https request
Hello,
I am sure this has been asked many times, but I could not find it in search. We use our F5s here internally, and the users can get to the websites using an internal hostname - like https://server1 When it appears like this in the browser, the SSL cert is actually for server1.companyxyz.com, and so, the browser complains about the SSL cert. Is there any way to automatically append the companyxyz.com to the request?
Thanks,
Jeff
- hooleylistCirrostratusHi Jeff,
when HTTP_REQUEST { HTTP::redirect https://server1.companyxyz.com[HTTP::uri] }
- Colin_Walker_12Historic F5 AccountAs Aaron mentioned, there's a bit of a chicken vs. egg issue that many users end up facing when dealing with manipulating SSL traffic. The traffic must be decrypted on the LTM before any manipulation can be performed. The problem is, as in this case, if the user is requesting a name not represented on the certificate, they're going to get the initial mismatch error on the first handshake with the LTM, even if you're decrypting SSL on the LTM. At that point, now that the traffic is decrypted, you can certainly manipulate the traffic at will, but it's too late to stop them from seeing the initial SSL mismatch error.
- Michael_YatesNimbostratusThe short answer is No.
- Colin_Walker_12Historic F5 Account^ What he said. ;)
- Michael_YatesNimbostratusLOL.....Nah....what you and Hoolio said.
- Colin_Walker_12Historic F5 AccountI'll take more coverage over less any day. I love this dang community. :)
- Ryan_Paras_7933NimbostratusIf you are involved with the issuing of the certificates, check out the use of Subject Alternative Names for your SSL certificate. Here is a quick explanation -> http://www.digicert.com/subject-alternative-name.htm
- Colin_Walker_12Historic F5 AccountNice Ryan, thanks.
- Michael_YatesNimbostratusYea....that is a good point Ryan.
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects