Is it possible to apply client ssl profile on the fly

Hi Ky,

 

 

It's possible to set a client SSL profile from an iRule using SSL::profile $clientssl_profile_name to switch which cert LTM presents the client. However, it's not practical with a typical user base (XP clients) to check which hostname the client is requesting and then specify the client SSL profile.

 

 

You can read about this here:

 

 

http://en.wikipedia.org/wiki/Server_Name_Indication

 

 

Note that XP doesn't support SNI for any IE version.

 

 

If you can get a single cert which is valid for all of the hostnames, then you can avoid this issue of trying to select the correct server cert.

 

 

Aaron