Forum Discussion

Bill_Farrell's avatar
Bill_Farrell
Icon for Nimbostratus rankNimbostratus
Jun 18, 2013

Irule to redirect 80 to 443 self signed cert issue

Hello,   I have an irule that is working fine,I am using a self signed cert for it, when the user types in "testserver.domain.com" the irule sends them to https://testserver.domain.com. IE warns t...
application delivery
dev
devops
iRules
Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Jun 18, 2013
In short, you either need TWO certificates (testserver and testserver.domain.com), a wildcard certificate (*.domain.com), or a SAN certificate (with the two subject alternative names in the certificate).

 

 

v11 supports the TLS Server Name Indication (SNI) extension. Create a separate client SSL profile for each certificate and specify its subject name in the "Server Name" block in the profile. Then apply both client SSL profiles to the VIP. If using a wildcard or SAN certificate, you can use that certificate in a single client SSL profile attached to the VIP.