Forum Discussion
whb5_98199
Nimbostratus
Nimbostratusirule to redirect https to https
I am new to irules and am looking for some assistance.
Here is my scenario.
Three URL addresses go the same address and that causes SSL certificate problems.
We redirect HTTP://www.main1.com to https://www.main1.com to access the site.
Correct URL: http://www.main1.com
Alternative URL: http://main1.com
Old URL: http://www.old1.com
We want to redirect http://main1.com to https://www.main1.com
and
We want to redirect http://www.old1.com to https://www.main1.com
The SSL certificate on the F5 is for www.main1.com.
Using either of the other URL’s will cause a pop-up message that probably confuses a user.
Can we re-direct to https:// to the correct URL and not have the SSL pop-up message appear.
Not sure if this can work.
Unfortunately, we don’t have a suitable test environment for this configuration so we have to get it right the first time.
I would rather not have to purchase an additional SSL certificate for each of the 2 other URL addresses.
Any solution would be appreciated.
hoolioCirrostratus
Hi,
If the client makes a request to the SSL proxy address over HTTPS with a host header value that doesn't match the cert's CN, they'll get the browser prompt to accept the mismatched cert. There isn't anything you can do to eliminate that.
You can try to eliminate the scenarios whereby a user would make a request to the SSL proxy via HTTPS with the wrong Host header value though.
If the client is first making a request via HTTP to a VIP address, you could redirect them to the correct host via HTTPS (https://www.main1.com). They wouldn't get the cert warning then.
Also, if you did end up buying the two additional SSL certs, you would need to configure separate SSL proxies on two new IP addresses.
Aaron