Forum Discussion

123notit_142916's avatar
123notit_142916
Icon for Nimbostratus rankNimbostratus
Mar 19, 2014

multiple SSL cert on 1 VIP question

I have a 'special' client that sent us 2 SSL certs to secure their website (www/non www of clientsite.com url).   I found this article - https://devcentral.f5.com/articles/multiple-certs-one-vip-t...
application delivery
design
devops
iRules
LTM
security
ssl
Patrik_Jonsson's avatar
Patrik_Jonsson
Icon for MVP rankMVP
Mar 19, 2014

Hi!

 

Sorry to say this, but you can't do this with two certificates. You need a multi certificate or a wildcard certificate to accomplish it.

 

Reason being that the information needed to determine which certificate to use is located at layer 7 while the ssl encryption is done before this.

 

Thus you can only use one certificate per IP+port.

 

/Patrik