Forum Discussion

Alice_214810's avatar
Alice_214810
Icon for Nimbostratus rankNimbostratus
Feb 26, 2016

Need help to install two SSL certificates issued from different certificate authority at BIG IP LTM virtual server.

Need help to install two SSL certificates issued from different Certificate Authority at BIG IP LTM virtual server   Understand that if multiple certificates are needed to install at one virtual s...
cloud
LTM
Josiah_39459's avatar
Josiah_39459
Historic F5 Account
Feb 26, 2016

Why do you need to install two certs on one vip? How will you select which cert to use on a given connection? Since Host (HTTP layer 7) is higher layer than SSL, you won't be able to access the host information to "switch" certificates until after the SSL handshake, which means you will always have untrusted connection errors in web browers.

 

Or do you actually have some implementation where you choose the cert based on client source ip?

 

  • Alice_214810's avatar
    Alice_214810
    Icon for Nimbostratus rankNimbostratus
    Feb 27, 2016
    I can actually install two certificates at one VIP. To achieve this, one SSL client profile must be configured as default SNI and as for another profile, you need to define URL at server name parameter.