For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

F5-Geek's avatar
F5-Geek
Icon for Nimbostratus rankNimbostratus
Sep 18, 2018

Irule help

To create a irule to create a client ssl profile and server ssl profile on Virtual server using SNI with a wildcard certificate with SAN.   This virtual server would used for different environmet ...
application delivery
LTM
F5-Geek's avatar
F5-Geek
Icon for Nimbostratus rankNimbostratus
Sep 19, 2018

Is the below irule-going to work

when HTTP_REQUEST {

set hostname HTTP::header replace Host "[class match -value [SSL:extension sni name ] equals "hostgroup"]"

} when SERVERSSL_CLIENTHELLO_SEND { set bin [binary format S1S1S1S1ca* 0 [expr [string length $hostname] + 5] [expr [string length $hostname] + 3] 0 [string length $hostname] $hostname] SSL::extensions insert $bin }

datagroup string abc1.com=abcsecure1.com abc2.com=abcsecure1.com