Forum Discussion

Nimbostratus

Mar 20, 2025

SNI Sites not taking correct certificate.

I have configured one VIP with two certificate aks.test.com aks4.test.com On SSL profile for aks.test.com i have enabled SNI feature and aks.test.com is working fine taking correct certificate (a...

Cirrocumulus

Mar 20, 2025

I hope you have done this ..If so , it should have worked ..

aks.test.com >> On this ssl profile tick the check box - "Default SSL Profile for SNI"

aks4.test.com

Militza
Nimbostratus
Mar 20, 2025
Yes it is done. but not working
- Paulius
  MVP
  Mar 20, 2025
  Would you be able to provide your SSL profiles configuration associated to this virtual server and the virtual server configuration so we can look at this further?
  - Militza
    Nimbostratus
    Mar 21, 2025
    ltm profile client-ssl clientssl-aks.test.com {
    app-service none
    cert-key-chain {
    aks.test.com_CA_Cert {
    cert aks.test.com
    chain CA_aks.test.com
    key aks.test.com
    }
    }
    defaults-from clientssl_cipheradapted
    inherit-ca-certkeychain true
    inherit-certkeychain false
    options { dont-insert-empty-fragments no-dtlsv1.2 }
    server-name none
    sni-default true
    }
    
    ltm profile client-ssl clientssl-aks4.test.com {
    app-service none
    cert-key-chain {
    aks4.test.com_CA_Cert {
    cert aks4.test.com
    chain CA_aks4.test.com
    key aks4.test.com
    }
    }
    defaults-from clientssl_cipheradapted
    inherit-ca-certkeychain true
    inherit-certkeychain false
    }