Forum Discussion
iRule to Redirect autodiscover traffic
Dear all,
the SSL certificate in my current virtual server points to autodiscover.abc.com and not autodiscover.abccommodities.com
I would like F5 to redirect from autodiscover.abccommodities.com ...
Can you remove the A record for autodiscover.abccommodities.com and replace it with an SRV record?
_autodiscover._tcp.abccommodities.com. 86400 IN SRV 0 5 5060 autodiscover.abc.com.
IheartF5_45022
Nacreous
NacreousCan you remove the A record for autodiscover.abccommodities.com and replace it with an SRV record?
_autodiscover._tcp.abccommodities.com. 86400 IN SRV 0 5 5060 autodiscover.abc.com.
It seems there is no other way other than meddling with customer's DNS or have customer to provision multiple SSL-Certs with the appropriate common name and add them into one virtual server.
When the client access one https site, client knows the hostname of the site. During SSL handshake, the server provide the certificate. If the CN in the server certificate does not match the hostname, the client will definitely get the certificate warning. HTTP redirect cannot fix the issue, as the certificate warning is in the first connection.
If one virtual server can provide the service for multiple HTTPS sites and provided customer can provision different SSL-Cert with its common names, the following article can help: K13452: Configuring a virtual server to serve multiple HTTPS sites using the TLS Server Name Indication feature (https://support.f5.com/csp/article/K13452)