Forum Discussion

yosry92_331999's avatar
yosry92_331999
Icon for Nimbostratus rankNimbostratus
Jan 14, 2018

F5 SNI issue

i have a https server that has 3 applications on it ,each application has a certificate , i want to distinguish those 3 applications by host name on F5 >>> so i created 4 client ssl profiles one for fallback (checked Default SNI option) and others have valid certificates of those host names(applications).

 

so this is from client side configuration. on the server side i created 4 server ssl profiles one for fallback (checked Default SNI option) and others have different server name for SNI.

 

when i apply them to virtual server i got an error which is>> 0107149e:3: Virtual server /rr/int_api.devabcdcentral.com_wildcard_443_dev has more than one clientssl/serverssl profiles that is default for SNI.

 

when i remove fallback (default profile) and apply others profiles i get another error >>> 0107157c:3: Selected client SSL profiles do not match security policies for Virtual Server /Common/rr

 

also i want to know if F5 inject SNI to server (3 applications) or not by using client/server SSL or should i use Irule to do that????