For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

yonatan's avatar
yonatan
Icon for Nimbostratus rankNimbostratus
Jan 20, 2022

Using two certificates with SNI and IP as common name

Hi all, I have a VS which client access using both FQDN and IP and I need it to be HTTPS. I have a legitimate cert for the FQDN (wildcard) and I've created a certificate for the IP address using a ...
BIG-IP
certificate
common name
ip address
LTM
security
sni
Nikoolayy1's avatar
Nikoolayy1
Icon for MVP rankMVP
Jan 26, 2022

Check the bug tracker but your settup is strange as the idea behind SNI is the same server IP address to be used by the server that host different domains:

 

https://support.f5.com/csp/bug-tracker?sf189923893=1

 

https://community.f5.com/t5/technical-articles/how-to-troubleshoot-sni/ta-p/281658

 

Also is the wildcard cert the default SNI cert? Do your client support SNI (for certificates that are not using the IP address do the clients match them correctly and only the one with the IP address is having issues)?