For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

IWhitmore's avatar
IWhitmore
Icon for Nimbostratus rankNimbostratus
Jun 10, 2014

Redirect SSL to SSL with header rewrite and certificates

Hi all. I have a question on using 301 or 302 redirects and SSL. I'm not sure if this can be solved by iRules.   The problem is the following:   X.bb.com is 1.1.1.1. If a user tries to connect ...
application delivery
BIG-IP DNS
design
devops
iRules
LTM
Steve_M__153836's avatar
Steve_M__153836
Icon for Nimbostratus rankNimbostratus
Jun 10, 2014

Sorry to just point you somewhere else, but this post/question has some good comments/answers on how you'll have to complete this. The short of it is you want an iRule to do a full redirect from y.bb.com to x.bb.com. An iRule redirect should not result in a cert error. However a DNS CNAME/Alias may result in a cert error.

 

IWhitmore's avatar
IWhitmore
Icon for Nimbostratus rankNimbostratus
Jun 10, 2014
Thanks for your reply Steve. You are right, it shouldn't result in a cert error if I redirect from HTTP to HTTPS or from HTTPS to HTTPS if I have a SAN cert for both sub-domains, or a wildcard or two separate SSL certs (one for x and one for y). The problem I have though is slightly different. If I only have a cert for x, how can I redirect an https request from y to x without it throwing a cert error? The solution in the post you pointed to was to use the same DNS for both domains and have a SAN cert (which is not available to me) and then rewrite the header. It never says whether or not he actually got it working in the end. But having a SAN cert makes the problem a lot easier. Interesting one for a lab maybe.