For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

ronnietheengine's avatar
ronnietheengine
Icon for Nimbostratus rankNimbostratus
Mar 31, 2017

SAN Certificate Troubleshooting

Hello,

 

I have a SAN Certificate and installed to BIG IP TL2000.The certificate was imported as pfx but i also tried to convert and installed as .pem file to BIG IP. The problem is i can not use the Client SSL profile for this certificate. The certificate has 3 sundomains as 1.xyz.com,2.xyz.com,3.xyz.com

 

Any help appreciated.

 

Thank You

 

application delivery
BIG-IP
san
security

1 Reply

  • Chase_Abbott's avatar
    Chase_Abbott
    Icon for Admin rankAdmin
    Mar 31, 2017

    This shouldn't be an issue. If the cert is SAN/Wildcard it can work fine within a single client ssl profile. You can choose how to segregate the traffic:

     

    1. 3 separate virtual servers using the same client ssl prof
    2. 1 virtual with 3 DNS A records pointing to it. Use an iRule to segregate the sites and pools with a switch statement.

    The PFX should import the cert/key just fine. I would import the intermediary certificate separately for cert chain linking.