Forum Discussion

Robin_Garner_76's avatar
Robin_Garner_76
Icon for Nimbostratus rankNimbostratus
Jun 16, 2017

iApp template with multiple client_ssl profiles for SNI

Currently the http iApp template doesn't allow you to add multiple client SSL profiles to an application, which is what you need to do when using SNI on the virtual host. I've just been burnt by modifying an app that had strict updates disabled and the virtual server modified by hand to add the required SSL profiles. Rather than rebuild the service by hand, I'd like to modify the template to allow for multiple client SSL profiles.

 

Has anyone done this for themselves ? I can't find any examples in the current iApps bundle, and the template language is a little daunting.

 

Thanks in advance,

 

Robin

 

application delivery
iApps
LTM
security
sni
  • Marco_Bayarena_'s avatar
    Marco_Bayarena_
    Icon for Altostratus rankAltostratus
    Aug 14, 2018

    I would like to know too. I have to disable Strict Updates to apply multiple SSL Client Profiles to VIP.

     

  • Marco_Bayarena_'s avatar
    Marco_Bayarena_
    Icon for Altostratus rankAltostratus
    Aug 14, 2018

    You would think that if the HTTP iApp has a this question: What FQDNs will clients use to access the servers? (you can add multiple) that it would support multiple SSL profiles.

     

    You're right the iApp template looks fairly complicated. I am not sure about how to create one with the ability to add multiple profiles. Is that a feature request type thing?

     

    • Shiran_Cohen's avatar
      Shiran_Cohen
      Icon for Nimbostratus rankNimbostratus
      Aug 14, 2018

      You right, BUT this Q is for the FQDN which will be used if you select "Create a new health monitor", it will create a custom HTTP monitor with a specific HTTP HOST header contains your FQDN. I also think there is a place to a feature request.

       

      Best Regards, Shiran Cohen.

       

    • Marco_Bayarena_'s avatar
      Marco_Bayarena_
      Icon for Altostratus rankAltostratus
      Aug 14, 2018

      That makes sense about the FQDN.

       

      I'll submit a feature request. Thanks.