Forum Discussion

ronnietheengine's avatar
ronnietheengine
Icon for Nimbostratus rankNimbostratus
Mar 31, 2017

SAN Certificate Troubleshooting

Hello,

 

I have a SAN Certificate and installed to BIG IP TL2000.The certificate was imported as pfx but i also tried to convert and installed as .pem file to BIG IP. The problem is i can not use the Client SSL profile for this certificate. The certificate has 3 sundomains as 1.xyz.com,2.xyz.com,3.xyz.com

 

Any help appreciated.

 

Thank You

 

application delivery
BIG-IP
san
security
  • Chase_Abbott's avatar
    Chase_Abbott
    Icon for Employee rankEmployee
    Mar 31, 2017

    This shouldn't be an issue. If the cert is SAN/Wildcard it can work fine within a single client ssl profile. You can choose how to segregate the traffic:

     

    1. 3 separate virtual servers using the same client ssl prof
    2. 1 virtual with 3 DNS A records pointing to it. Use an iRule to segregate the sites and pools with a switch statement.

    The PFX should import the cert/key just fine. I would import the intermediary certificate separately for cert chain linking.