Forum Discussion

yuanqiang_22112's avatar
yuanqiang_22112
Icon for Nimbostratus rankNimbostratus
May 16, 2016

SSL offload(two certificates)

Hello ereryone: I have a Virtual server associated two different certificates ,and customer visit the system with www.txhd.comwww.txhd.cn when I visit hope ssl offload with the first certificate ;when I visit hope ssl offload with the second certificate; How to achieve this !

 

  • mo_99289's avatar
    mo_99289
    Historic F5 Account
    Could SOL https://support.f5.com/kb/en-us/solutions/public/13000/400/sol13452.html help?
  • Hello,

     

    You have basically two ways :

     

    • Generating an SSL certificate that use Subject Alternative Name so that you can use one ssl profile with your VS
    • using Server Name Indication settings in both ssl profiles. You set the expected hostname in the SNI input on each SSL profile and you should define one of them as default profile. Then assign both in your VS
  • Hi mate,

    You can achieve this by configuring TLS SNI which is straight forward. Let me know if you have any questions.

    https://support.f5.com/kb/en-us/solutions/public/13000/400/sol13452.html

    -Jinshu

  • Yes and Yes for all the answers but if you choose SNI then remember the back end server also has to support SNI.