SSL Profiles Part 7: Server Name Indication

This is the seventh article in a series of Tech Tips that highlight SSL Profiles on the BIG-IP LTM.  The other articles are: SSL Overview and Handshake SSL Certificates Certificate Chain Impl...
Updated Mar 24, 2023
Version 2.0
LTM
security
series-the-ssl-profile
ssl
tech tip
oogabooga_13071's avatar
oogabooga_13071
Icon for Altocumulus rankAltocumulus
Mar 02, 2018

It is worth pointing out, that note: Beginning in BIG-IP 11.6.0, if you leave the Server Name box blank, the BIG-IP system reads the Subject Alternative Name (SAN) from the certificate. For versions prior to BIG-IP 11.6.0, if you leave the Server Name box blank, the BIG-IP system reads the Common Name (CN) from the certificate.

 

So no need to create a new ssl profile for each server name, just leave the server name field blank and BIG-IP will read the server names defined in cert :) yay. I only just found out :)