For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

bigipjr28_13978's avatar
bigipjr28_13978
Icon for Nimbostratus rankNimbostratus
Aug 20, 2015

multiple applications behind one VIP and certs

Hello,   I was wondering the best way to around to solve this problem. In order to preserve IP space I have started to use host headers and along with an irule to route to the same pair of webserv...
Stanislas_Piro2's avatar
Stanislas_Piro2
Icon for Cumulonimbus rankCumulonimbus
Aug 21, 2015

Hi,

 

When reading the irule, there is a reference of issuer which let us think you are doing client cert authentication.

 

but when reading other explanation, i'm not sure the goal is to authenticate client with certificate.

 

Do you expect to select certificate based on requested URL. this feature is called Server name indication (SNI).

 

As SNI is based on clientssl profile, you can define client cert authentication with dedicated allowed CA for every client SSL profile.