Forum Discussion
Frank_Mancini_3
Nimbostratus
Feb 11, 2008redirection for SSL without cert HELP
If I have a virtual interface configured for TCP 443 and I have a redirection iRule to a correct good URL:
when HTTP_REQUEST {
HTTP::redirect "https://www.mysite.com"
} ...
hoolio
Cirrostratus
Feb 12, 2008When you make a request to an HTTPS web server and the server responds with a certificate, the browser compares the subject of the cert with the host name it made the request to. If they don't match, and the browser isn't configured to ignore cert mismatch errors, the browser will generate a cert mismatch error. As you're making a request by IP address, the cert subject won't match and you'll get the browser warning.
If you make a request which matches the cert's subject, do you still get a warning? Are clients requesting host names which don't match the cert's subject? If so, take a look at this post (Click here) for some additional info.
Aaron
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects