For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Jon_Wallwork_46's avatar
Jon_Wallwork_46
Icon for Nimbostratus rankNimbostratus
May 13, 2008

Methods for selecting SSL Profile

Hi All     We have a customer who would like to do the following: I think its not possible but thought one of you guys will know more than me.     They have only one IP address a...
application delivery
dev
devops
iRules
v4
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
May 15, 2008
You can't read the host in the HTTP headers until the SSL has been decrypted. You can't decrypt the SSL until you present a cert to the client and the SSL handshake is complete. In 9.x, you could select a client SSL profile but you need to know which one to present before you decrypt the SSL. In 4.x, there isn't anything that comes close to this.

 

 

Aaron