For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Joe_Pipitone's avatar
Joe_Pipitone
Icon for Nimbostratus rankNimbostratus
Jan 28, 2010

ssl redirect not working

I have 2 separate VIP's, one for traffic on port 80, another for port 443. They both have the same VIP. Traffic works fine on both port 80 and 443. W...
application delivery
dev
devops
iRules
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Feb 01, 2010
As Moo suggests, that can't work to avoid a cert mismatch error. Here are three options to resolve this:

 

 

Redirect users to www.oursite.com before they access oursite.com via HTTPS. You could try to do this on the HTTP VIP. But with a cert which is only valid for www.oursite.com, a direct request to https://oursite.com will trigger an mismatched SSL cert warning.

 

 

Change the DNS record for oursite.com or www.oursite.com so they resolve to separate IP addresses. You could then use a separate VIP and SSL cert for oursite.com.

 

 

Buy a single cert which is valid for oursite.com and www.oursite.com (sometimes called a Unified Communications Cert). With this, you could accept requests for both hostnames on the same VIP without a mismatched cert warning or redirects.

 

 

Aaron