Building a proxy to reach out to an internet based SSL server

What we would like to do is setup a VIP in BIG-IP that will accept HTTP requests from the client, and forward those requests to an HTTPS internet server. The SSL Handshake is incomplete. The Client Hello occurs but there is no Server Hello.

 

1) The virtual has an iRule to rewrite the host name on HTTP_REQUESTs (proxy.local.domain.ca ==> site.domain.name.ca) 2) The CN on the cert returned (ssl2016.domain.name.ca), when going directly to the site, does not match the Host in the request (site.domain.name.ca).

 

Can we accomplish this?

 

Patrick