For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Miron_du_Plessi's avatar
Miron_du_Plessi
Icon for Nimbostratus rankNimbostratus
Nov 03, 2007

HTTP Redirect based on URI

Hi,     I have a webserver behind our LTM. Access to the webserver is working correctly when users use the full url of     https://remedy.xxx.net/arsys/home     however we are trying...
application delivery
dev
devops
iRules
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Nov 06, 2007
If the client makes a request to the VIP address over HTTPS with a host header value that doesn't match the cert's CN, they'll get the browser prompt to accept the mismatched cert. There isn't anything you can do to eliminate that.

 

 

You can try to eliminate the scnearios whereby a user would make a request to the VIP via HTTPS with the wrong Host header value though.

 

 

If the client is first making a request via HTTP to the VIP address, you could redirect them to the correct host via HTTPS (https://remedy.xxx.net). They wouldn't get the cert warning then.

 

 

Aaron