Forum Discussion

Malcolm_Sutton_'s avatar
Malcolm_Sutton_
Icon for Nimbostratus rankNimbostratus
Oct 08, 2018

Help writing an Irule for port 636

When I connect from my computer using openssl to Vip1(Pool1), I want it to be redirect to VIP2(Pool2) and get the a different certificate from VIP2 , it presents the certificate for VIP1. I am using a data group, but it only has my computer's IP in the list. I created ssl profiles for both VIP, Hopefully I clearly described it.

when CLIENT_ACCEPTED {
    if { [class match [IP::client_addr] equals Excempt_TLS_wabbit] } {
        SSL::profile "cert-ovd_clientssl"
        pool "IAM_OVD_WeblogicServer_7501"}
}
application delivery
iRules
  • Kevin_Stewart's avatar
    Kevin_Stewart
    Icon for Employee rankEmployee
    Oct 09, 2018

    You normally have to do a little extra work to change the client SSL profile. Try this:

    when CLIENT_ACCEPTED {
    if { [class match [IP::client_addr] equals Excempt_TLS_wabbit] } {
        set sslprof "SSL::profile cert-ovd_clientssl"
        eval ${sslprof}
        pool "IAM_OVD_WeblogicServer_7501"
    }
}