For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

jforaker's avatar
jforaker
Icon for Nimbostratus rankNimbostratus
Mar 10, 2014

Client SSL profiles using SNI not able to use the subject alternative name

We have a clientssl profile using a *.domain.com wildcard SSL certificate. This profile is set as the default for SNI. We also have specific clientssl profiles using the application specific SSL cer...
application delivery
client-side
clientssl
deployment
LTM
sni
jforaker's avatar
jforaker
Icon for Nimbostratus rankNimbostratus
Mar 11, 2014

Kevin thanks for this. I did not notice the Server Name in the profile. As a test I configured this entry with a wildcard for the certificate domain: *.application.com.

 

This worked with one of our certs that have multiple SAN entries but they are all in the same domain:

 

preview.application.com

 

pre-pub.application.com

 

Is there any way to have multiple domains in the server name field of the clientssl profile to cover multiple domains?

 

preview.application.com

 

pre-pub.application.com

 

preview.differentapplication.com

 

pre-pub.differentapplication.com

 

 

If not then the only option would be as you stated, a clientssl profile for each SAN name.