For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Girish_HS_32793's avatar
Girish_HS_32793
Icon for Nimbostratus rankNimbostratus
Jul 23, 2008

Same VIP Multiple SSL Certs

Hi,   We have 4 http applications which are mapped to one Public IP address and I have used one Virtual IP address on my LTM to cater to these 4 application, all the 4 application use the same po...
application delivery
dev
devops
iRules
Nicolas_Menant's avatar
Nicolas_Menant
Icon for Employee rankEmployee
Jul 23, 2008
Hi,

 

 

The problem you face is that SSL communication is established before any HTTP transactions has been done. Therefore you won't be able to use an iRule to automatically select the good Certificate to use. Even within the BIGIP configuration you won't be able to handle this.

 

 

You will need to define 4 differents VS to do this or create a wildcard certificate (if your applications are appli1.mysite.com, appli2.mysite.com, ... you need a certificate for *.mysite.com)

 

 

Do you have any way to identify which application is requested except through the URI? (like source ip address, etc...)