Forum Discussion
kfenske_50686
Nimbostratus
Nov 03, 2008F5 redirection
I have created a virtual server IP x.x.x.x and applied the irule, when HTTP_REQUEST {
HTTP::redirect https://[HTTP::host][HTTP::uri] } for SSL redirection. However when I browse to domain.com (IP address x.x.x.x) My browser receives "there is a problem with this website's security certificate" because its the internal F5 certificate that is being presented. If I choose to continue with this certificate it pulls up the correct url with the correct SSL certificate. How do I overcome this issue? Thanks Keith
6 Replies
- steve_88008
Nimbostratus
are you off loading the ssl to the ltm? If so, did you create an ssl profile and assign to correct virtual server? - kfenske_50686
Nimbostratus
Yes we are offloading the SSL to the LTM and created a client ssl profile with the proper certificate. - steve_88008
Nimbostratus
did you change\assign that ssl profile to the virtual server? - kfenske_50686
Nimbostratus
Yes as a SSL profile on our SSL virtual server not the initial virtual server mentioned. Initial virtual server redirect to the SSL virtual server via the irule. - kfenske_50686
Nimbostratus
Thats is the same way I have it configured. Let me explain a little further. http://www.domain.com resolves to ip x.x.x.x forwards via irule to https://www.domain.com just fine. http://domain.com resolves to the same ip x.x.x.x above but doesn't forward to https://www.domain.com. I get the "there is a problem with this website's security certificate" because its the internal F5 certificate that is being presented. - hoolio
Cirrostratus
Hi Kfenske,
Take a look at this post for some related info:
http://devcentral.f5.com/Default.aspx?tabid=53&forumid=5&tpage=1&view=topic&postid=1913619143
You can search the iRule forums for "subject alternate name cert" for more info.
Aaron
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects