Forum Discussion
F5 Big-IP Trust Internal CA Chain certificates for Web Servers
You mean you applied 2 server SSL profiles?
Can you use only the new one? If no you need to let VS know which one to use in each request.
Happy Friday. Thanks for the suggestion. I have to keep the default serverssl profile on the VS as we have multiple applications running on the same VS. The new serverssl profile I've created is specifically for our internal web server pools.
How do I tell the VS which profile to use, iRule or in the ssl profile?
- Injeyan_KostasSep 05, 2025
Nacreous
Happy Friday to yoo too pcourtois​
irule is you friend in this case
check this https://my.f5.com/manage/s/article/K13452when HTTP_REQUEST { set hostname [getfield [HTTP::host] ":" 1] } when SERVER_CONNECTED { switch -glob [string tolower $hostname] { "sitea.com" { SSL::profile serverssl-siteA } "siteb.com" { SSL::profile serverssl-siteB } default { #default serversssl profile to be selected if Host header value cannot be matched with predefined values SSL::profile serverssl } } }- pcourtoisSep 05, 2025
Cirrus
Copy that. You ROCK! Thank you. I'll give this a try and update.
Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
