Forum Discussion
NimbostratusLTM support multiple SAN certs on single virtual server
System: BIG-IP versions earlier than 11.5.x Requirement: Offload multiple SAN certs on single Virtual Server
Have an end-user requirement to offload multiple SAN certs on single Virtual Server due to financial entity reason, and is it possible or workaround to achieve this?
SAN cert 1 (existing) abc.com cde.com
SAN cert 2 (new) fgh.com hij.com
Thanks in advanced.
2 Replies
- Kevin_Stewart
Employee
Unfortunately a single LTM client SSL profile can't specify multiple server name (SNI) values, and an SNI client SSL profile is "selected" based on the Server Name attribute in the profile. What you can do is define a separate client SSL profile for each SAN value (plus the CN if different) and apply all of those to the LTM VIP. So for your example:
SAN cert 1 would create two client SSL profiles, each with a different Server Name value (abc.com and cde.com). SAN cert 2 would create two separate client SSL profiles. Apply all four SSL profiles to the VIP.
- Kevin_Stewart
You are indeed correct. Good catch. Fortunately Don was talking about 11.5.0 and older, so I wasn't completely wrong. ;)
