For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

rache1_266651's avatar
rache1_266651
Icon for Nimbostratus rankNimbostratus
Sep 29, 2017

SSL validation with client (browser) in case of URL redirection

we have a task to redirect a URL say abc.com to on the GTM.   Currently we have a cname to point to , since we are using sd.com zone for doing global load balancing. The is pointing to reverse...
BIG-IP DNS
LTM
security
Stanislas_Piro2's avatar
Stanislas_Piro2
Icon for Cumulonimbus rankCumulonimbus
Sep 30, 2017

Hi,

 

Certificate validation doesn’t follow dns cname.

 

If your browser requests abc.com, certificate must include abc.com in SAN (or Subject but if SAN exists, subject is ignored, and chrome decided to make subject validation deprecated)