Forum Discussion

Bob_10976's avatar
Bob_10976
Icon for Nimbostratus rankNimbostratus
Aug 21, 2013

SSL Cert warning with irule https to http

Hello all.. We have an issue where we need to redirect the request https://www.domain.com to https://domain.com. We have an irule in place, see below, that does this, however when the end user goes ...
application delivery
devops
iRules
Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Oct 08, 2013

So I have a SAN cert with alternate name without www. How do I get traffic forwarding from both http://mysite.com to http://www.mysite.com and https://mysite.com to https://www.mysite.com

You're HTTP (port 80) VIP would be the simplest, and you probably don't care what URI they're using to get there:

when HTTP_REQUEST {
    HTTP::redirect "https://www.mysite.com[HTTP::uri]"
}

And then the HTTPS (port 443) VIP would simply need to catch anything going to "mysite.com" and redirect to "www.mysite.com":

when HTTP_REQUEST {
    if { [string tolower [HTTP::host]] equals "mysite.com" } {
        HTTP::redirect "https://www.mysite.com[HTTP::uri]"        
    }
}

The SAN certificate that you apply to the HTTPS VIP should include both the "www.mysite.com" and "mysite.com" subject names.