Forum Discussion
gGnome_32510
Nimbostratus
NimbostratusRedirection
We are new to F5, tcl, iRules... the works, so I apologize if this is an easy one. I have several SSL sites (F5 is the endpoint) that are secured with *.domain.com cerfificates, and an iRule that red...
gGnome_32510Nimbostratus
NimbostratusRight now I don't have a good way to test the "Using default hostname" case, so I'm concentrating on the other two. I ran the request once with www.example.com and once with http://example.com, and both passed the if {[domain [HTTP::host] 3] ne ""} check though the second should have failed. Here are the log entries:
Jan 15 08:17:01 tmm tmm[929]: Rule http_to_https_v3 : 1.1.1.7:1053: GET request to 192.168.18.34 www.example.com/
Jan 15 08:17:01 tmm tmm[929]: Rule http_to_https_v3 : 1.1.1.7:1053: Passed domain check.
Jan 15 08:17:38 tmm tmm[929]: Rule http_to_https_v3 : 1.1.1.7:1060: GET request to 192.168.18.34 example.com/
Jan 15 08:17:38 tmm tmm[929]: Rule http_to_https_v3 : 1.1.1.7:1060: Passed domain check.
Thanks for the info on Pair. Thawte told me I would have to use two certificates to accomplish the same end result (and Thawte is even more expensive). It won't help me in the short term, but I may well change CA's as my wildcards come up for renewal.
Gregg
