Forum Discussion
Nimbostratususe irule to give out ssl certs
how do I use an irule to give out certs based on domain name?
Without SNI (server name indication) it's not possible.
See: https://devcentral.f5.com/articles/multiple-certs-one-vip-tls-server-name-indication-via-irules.Ux4dM_l5NUM
3 Replies
- Kevin_Stewart
Employee
Can I assume you mean to present a server certificate in an SSL handshake based on the requested host name? If so, iRule implementations are limited. Your best bet may be:
-
A single wildcard server certificate
-
A single SAN server certificate
-
Multiple Server Name Indicator (SNI) certificates
-
Kurt_Knochner_5Cirrus
Without SNI (server name indication) it's not possible.
See: https://devcentral.f5.com/articles/multiple-certs-one-vip-tls-server-name-indication-via-irules.Ux4dM_l5NUM
drisher_24595thank you. just found the SNI article. i'll see if it will do the trick.
