Forum Discussion
jforaker
Nimbostratus
NimbostratusClient SSL profiles using SNI not able to use the subject alternative name
We have a clientssl profile using a *.domain.com wildcard SSL certificate. This profile is set as the default for SNI. We also have specific clientssl profiles using the application specific SSL cer...
crraymond_14666Nimbostratus
NimbostratusIt doesn't seem to accept commas in 11.5.2
The 11.6.1 release notes also indicate the default for the server name field is now the SAN. Formerly it was the common name.
- Kevin_Stewart
Employee
But again, what really matters here is what's in the Server Name field of the client SSL profile. This is what the F5 matches the Client Hello SNI against. It's true that browsers are starting to require a SAN value in server certificates (ex. Chrome 58), but that's irrespective of the SNI-profile match.
