Forum Discussion

IWhitmore's avatar
IWhitmore
Icon for Nimbostratus rankNimbostratus
Jun 10, 2014

Redirect SSL to SSL with header rewrite and certificates

Hi all. I have a question on using 301 or 302 redirects and SSL. I'm not sure if this can be solved by iRules.   The problem is the following:   X.bb.com is 1.1.1.1. If a user tries to connect ...
application delivery
BIG-IP DNS
design
devops
iRules
LTM
Cory_50405's avatar
Cory_50405
Icon for Noctilucent rankNoctilucent

You can actually specify multiple client SSL profiles (hence multiple certificates) on one virtual server based on TLS SNI. This may be of use to you.

 

http://support.f5.com/kb/en-us/solutions/public/13000/400/sol13452.html

 

Arie's avatar
Arie
Icon for Altostratus rankAltostratus
Jun 10, 2014
The demise of Windows XP finally made this option truly available, as it was just about the only OS (i.e. all versions of IE on XP) that isn't compatible with SNI. Of course this limitation still applies if a significant portion of a site's visitors are using XP. Many governments are paying Microsoft for extended support since they're still using XP.