Forum Discussion

drisher_24595's avatar
drisher_24595
Icon for Nimbostratus rankNimbostratus
Mar 10, 2014

use irule to give out ssl certs

how do I use an irule to give out certs based on domain name?  
application delivery
devops
iRules
  • Kurt_Knochner_5's avatar
    Kurt_Knochner_5
    Mar 10, 2014

    Without SNI (server name indication) it's not possible.

     

    See: https://devcentral.f5.com/articles/multiple-certs-one-vip-tls-server-name-indication-via-irules.Ux4dM_l5NUM

     

Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Mar 10, 2014

Can I assume you mean to present a server certificate in an SSL handshake based on the requested host name? If so, iRule implementations are limited. Your best bet may be:

 

  1. A single wildcard server certificate

     

  2. A single SAN server certificate

     

  3. Multiple Server Name Indicator (SNI) certificates