F5 is upgrading its customer support chat feature on My.F5.com. Chat support will be unavailable from 6am-10am PST on 1/20/26. Refer to K000159584 for details.

Forum Discussion

Malcolm_Sutton_'s avatar
Malcolm_Sutton_
Icon for Nimbostratus rankNimbostratus
Oct 08, 2018

Help writing an Irule for port 636

When I connect from my computer using openssl to Vip1(Pool1), I want it to be redirect to VIP2(Pool2) and get the a different certificate from VIP2 , it presents the certificate for VIP1. I am using ...
application delivery
iRules
Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Oct 08, 2018

You normally have to do a little extra work to change the client SSL profile. Try this:

when CLIENT_ACCEPTED {
    if { [class match [IP::client_addr] equals Excempt_TLS_wabbit] } {
        set sslprof "SSL::profile cert-ovd_clientssl"
        eval ${sslprof}
        pool "IAM_OVD_WeblogicServer_7501"
    }
}