For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

whb5_98199's avatar
whb5_98199
Icon for Nimbostratus rankNimbostratus
Nov 15, 2007

irule to redirect https to https

I am new to irules and am looking for some assistance.   Here is my scenario.     Three URL addresses go the same address and that causes SSL certificate problems.     We redirect HT...
application delivery
dev
devops
iRules
v4
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Nov 15, 2007
Hi,

 

 

If the client makes a request to the SSL proxy address over HTTPS with a host header value that doesn't match the cert's CN, they'll get the browser prompt to accept the mismatched cert. There isn't anything you can do to eliminate that.

 

 

You can try to eliminate the scenarios whereby a user would make a request to the SSL proxy via HTTPS with the wrong Host header value though.

 

 

If the client is first making a request via HTTP to a VIP address, you could redirect them to the correct host via HTTPS (https://www.main1.com). They wouldn't get the cert warning then.

 

 

Also, if you did end up buying the two additional SSL certs, you would need to configure separate SSL proxies on two new IP addresses.

 

 

Aaron