Forum Discussion
Dinesh3888
Nimbostratus
NimbostratusIrule creation
Hi,
Need a help on irule i have a site when user hits this they have to be redirected to https://aaa.yyy.com where as yyy.com is our domain name.I have cert with FQDN aaa.yyy.com. So whenever user hits they are getting SSL error. Note:I cannot add aaa as SAN name to cert because this is external cert and we access this url both internal and external.
Stanislas_Piro2Cumulonimbus
Hi,
when the browser first requests , the browser :
- open TCP connection
- Initiate the TLS handshake with server name "aaa"
- receive the browser with aaa.yyy.com certificate
- display SSL error, the user accept the SSL error
- send request for
- receive the redirect to https://aaa.yyy.com
you can create a certificate for aaa sign by your internal CA (imported in browsers trusted CA) and enable SNI
Dinesh3888Thanks Piron. Do we need to import the private cert in all users browser?
- Stanislas_Piro2
do you already have a certificate authority in your company?
- Dinesh3888
Yes we have
- Stanislas_Piro2
So I guess this certificate authority is already added as trusted CA on all AD computers.
If it is, there is no more action to be done on computers.