Forum Discussion

whb5_98199's avatar
whb5_98199
Icon for Nimbostratus rankNimbostratus
Nov 15, 2007

irule to redirect https to https

I am new to irules and am looking for some assistance.

 

Here is my scenario.

 

 

Three URL addresses go the same address and that causes SSL certificate problems.

 

 

We redirect HTTP://www.main1.com to https://www.main1.com to access the site.

 

 

Correct URL: http://www.main1.com

 

 

Alternative URL: http://main1.com

 

Old URL: http://www.old1.com

 

 

We want to redirect http://main1.com to https://www.main1.com

 

 

and

 

 

We want to redirect http://www.old1.com to https://www.main1.com

 

 

The SSL certificate on the F5 is for www.main1.com.

 

 

Using either of the other URL’s will cause a pop-up message that probably confuses a user.

 

 

Can we re-direct to https:// to the correct URL and not have the SSL pop-up message appear.

 

 

Not sure if this can work.

 

 

Unfortunately, we don’t have a suitable test environment for this configuration so we have to get it right the first time.

 

 

I would rather not have to purchase an additional SSL certificate for each of the 2 other URL addresses.

 

 

Any solution would be appreciated.

1 Reply

  • Hi,

     

     

    If the client makes a request to the SSL proxy address over HTTPS with a host header value that doesn't match the cert's CN, they'll get the browser prompt to accept the mismatched cert. There isn't anything you can do to eliminate that.

     

     

    You can try to eliminate the scenarios whereby a user would make a request to the SSL proxy via HTTPS with the wrong Host header value though.

     

     

    If the client is first making a request via HTTP to a VIP address, you could redirect them to the correct host via HTTPS (https://www.main1.com). They wouldn't get the cert warning then.

     

     

    Also, if you did end up buying the two additional SSL certs, you would need to configure separate SSL proxies on two new IP addresses.

     

     

    Aaron