For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

PK_Bhatia's avatar
PK_Bhatia
Icon for Nimbostratus rankNimbostratus
Jun 30, 2014

SAN name is not working

I am trying to use a new cert which has alternate name as abc.com and www.abc.com. I am also using SNI with name xyz.com which is default SNI for the SSL profile. I can see both the entries (abc.com ...
Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Jun 30, 2014

That's not exactly how the LTM SNI functionality should work. With SNI enabled, LTM will select the client SSL profile with the SNI server name that matches the client's request. You could then create several client SSL profiles, embed each with a unique single-subject cert/key, and then apply all of these client SSL profiles to the LTM VIP.

 

Given that you have a SAN cert, you shouldn't need to do SNI. Remove the SNI settings from the client SSL profile.