For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

JB_41040's avatar
JB_41040
Icon for Nimbostratus rankNimbostratus
Feb 12, 2016

trying to redirect one https url to another

We have SSL cert for one domain1 but not for domain2. Our links are all relative and a link works just fine. However generates a SSL cert error as expected.

 

In order to get around that without having to hard code the contactus links on domain2 to domain1, i am trying to write an iRule. I tried the one below but the page still gives me the SSL cert error and then redirects to domain1 instead. Any ideas?

 

when HTTP_REQUEST {
    if { ([HTTP::host] contains "domain2") and (([HTTP::uri] contains "view=contactus") or ([HTTP::uri] contains "view=emailto"))
        }
    { HTTP::respond 301 Location "https://domain1[HTTP::uri]"
    }
}
application delivery
BIG-IP
iRules

2 Replies

  • VernonWells's avatar
    VernonWells
    Icon for Employee rankEmployee
    Feb 12, 2016

    The TLS negotiation occurs before any higher layer messages are exchanged. Even if you configured the web server to respond with a redirect, you would still get the cert warning. This is by design. Otherwise, a man-in-the-middle could inject a redirect (or really, any response) without the client knowing that it was not coming from the intended endpoint.