Forum Discussion

Alice_214810's avatar
Alice_214810
Icon for Nimbostratus rankNimbostratus
Feb 26, 2016

Need help to install two SSL certificates issued from different certificate authority at BIG IP LTM virtual server.

Need help to install two SSL certificates issued from different Certificate Authority at BIG IP LTM virtual server

 

Understand that if multiple certificates are needed to install at one virtual server, one of the SSL client profile must be configured as default SNI and chain and root certificate must be the same. Hence, I would like to know if there is a way to install two different SSL cert which has different chain and root certificate at one virtual server?

 

TMOS version is 11.5.3. Thanks!

 

cloud
LTM

2 Replies

Sort By
  • Josiah_39459's avatar
    Josiah_39459
    Historic F5 Account
    Feb 26, 2016

    Why do you need to install two certs on one vip? How will you select which cert to use on a given connection? Since Host (HTTP layer 7) is higher layer than SSL, you won't be able to access the host information to "switch" certificates until after the SSL handshake, which means you will always have untrusted connection errors in web browers.

     

    Or do you actually have some implementation where you choose the cert based on client source ip?

     

    • Alice_214810's avatar
      Alice_214810
      Icon for Nimbostratus rankNimbostratus
      Feb 27, 2016
      I can actually install two certificates at one VIP. To achieve this, one SSL client profile must be configured as default SNI and as for another profile, you need to define URL at server name parameter.