Forum Discussion
ekanathdas_2662
Nimbostratus
Dec 23, 2009https to https with certificate error
Objective
http://www.xyz.com and https://www.xyz.com should redirect to https://xyz.com
=============
conclusion:
http://www.xyz.com is redirecting to https://xyz.com
but
https://www.xyz.com is redirecting to https://xyz.com with a certificate error:
"ERROR: certificate common name `xyz.com' doesn't match requested host name `www.xyz.com'"
================
Below are the configs on the bigip v4
virtual 192.168.81.200:80 unit 1 {
use rule xyz.com-irule
}
proxy 192.168.86.243:443 unit 1 {
target virtual 127.0.86.243:80
clientssl enable
clientssl key xyz.com.key-NEW.key
clientssl cert xyz.com-new.crt
}
virtual 127.0.86.243:80 unit 1 {
netmask 255.255.255.255
use pool random-xyz-pool
}
pool random-xyz-pool {
member 192.168.62.22:http
member 192.168.63.23:http
}
rule xyz.com-irule {
if (http_host == "www.xyz.com") {
redirect to "xyz.com"
}
else {
redirect to "https://%h/%u"
}
}
Any ideas are welcome, does a certificate with www.xyz.com needs to be deployed?
Thanks
- The_Bhattman
Nimbostratus
Is the certificate you have a wildcard cert? I.E. *.xyz.com - ekanathdas_2662
Nimbostratus
certificate is for xyz.com. - The_Bhattman
Nimbostratus
If you can use www.xyz.com cert on a diferent VIP then .xyz.com then you can get around the problem. The last alternative in my mind is wildcats feet.
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects