Forum Discussion
Joel_Moses
Nimbostratus
Mar 28, 2011TLS Server Name Indication iRule
http://devcentral.f5.com/wiki/default.aspx/iRules/TLS_ServerNameIndication.html
I posted the iRule above for discussion purposes. It decodes the TLS SNI extension field in an SSL/TLS negot...
Kevin_Stewart
Employee
Sep 07, 2018The server SSL profile has a "Server Name" property that will insert an SNI value.
But if you need this to be dynamic, the following will do what you need:
when SERVERSSL_CLIENTHELLO_SEND {
if { [info exists servername] } {
set bin [binary format S1S1S1S1ca* 0 [expr [string length ${servername}] + 5] [expr [string length ${servername}] + 3] 0 [string length ${servername}] ${servername}]
SSL::extensions insert $bin
}
}
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects
