Forum Discussion
vinceKahn_97184
Dec 05, 2007Historic F5 Account
https cert redirect
I'm trying to solve the following invalide cert use case:
Cert's issued to "www.foo.com"
User types url "https://foo.com"
I figured out how to redirect the request to "https:/...
hoolio
Cirrostratus
Dec 05, 2007Hi,
If the client makes a request to the virtual server over HTTPS with a host header value that doesn't match the cert's CN, they'll get the browser prompt to accept the mismatched cert. There isn't anything you can do to eliminate that.
You could get a wildcard cert which is valid for *.foo.com.
Or you could try to eliminate the scenarios whereby a user would make a request to the HTTPS VIP with the wrong Host header value.
If the client is first making a request via HTTP to a VIP address, you could redirect them to the correct host via HTTPS (https://www.foo.com). They wouldn't get the cert warning then.
Aaron
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects