Redirect HTTPs without error message.

If the client makes a request to the VIP with a host of foo.com and the cert you present to the client isn't for foo.com or *.foo.com, the browser will generate a cert mismatch error. It doesn't matter if you respond with HTTP content or an HTTP redirect to a domain you do have a cert for.

 

 

In order to avoid the cert mismatch warning, you need to get a cert for foo.com or *.foo.com. However, I'm guessing that if you can't get a cert for foo.com you won't be able to get a wildcard cert for *.foo.com either.

 

 

Aaron