For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

david_gaussiran's avatar
david_gaussiran
Icon for Nimbostratus rankNimbostratus
Jan 17, 2007

Multiple SSL certs to single proxy site

I would like to use 2 different SSL certificates which are registered to completely different domains on a single proxy pointing to a single website. In other words, I have a virtual server with a proxy and one IP. The proxy settings only let me specify a single SSL Cert/SSL Key. I would like to use 2 different certs/keys on a single proxy and have it validate.

 

 

If someone were to connect using www.domain1.com or www.domain2.org, which both point to the same public IP, BigIP would need to be able to validate either domain cert. Is this possible?

 

 

Dave
application delivery
dev
devops
iRules
v4

2 Replies

  • Martin_Machacek's avatar
    Martin_Machacek
    Historic F5 Account
    Jan 17, 2007
    David,

     

     

    it is simply not possible. IMHO, the only possible fix is to make www.domain1.org and www.domain2.org resolve to different IP addresses and configure 2 SSL proxies.

     

     

    BTW, this question is off-topic for this list since it is not related to iRules. iRules cannot be used as part of the solution because the content of the request is not available until it is decrypted.
  • Steve_87232's avatar
    Steve_87232
    Icon for Nimbostratus rankNimbostratus
    Oct 06, 2009
    my bad for not searching, for some reason I just scrolled though a few pages.

     

     

    For those that found this in a search:

     

     

    http://devcentral.f5.com/Default.aspx?tabid=53&view=topic&postid=3071&forumid=5&tpage=1

     

    http://devcentral.f5.com/Default.aspx?tabid=53&forumid=5&postid=84991&view=topic

     

     

    and many more.