Forum Discussion

Dinesh3888's avatar
Dinesh3888
Icon for Nimbostratus rankNimbostratus
May 19, 2018

Irule creation

Hi,

 

Need a help on irule i have a site when user hits this they have to be redirected to https://aaa.yyy.com where as yyy.com is our domain name.I have cert with FQDN aaa.yyy.com. So whenever user hits they are getting SSL error. Note:I cannot add aaa as SAN name to cert because this is external cert and we access this url both internal and external.

 

devops
iRules

5 Replies

Sort By
  • Stanislas_Piro2's avatar
    Stanislas_Piro2
    Icon for Cumulonimbus rankCumulonimbus
    May 19, 2018

    Hi,

     

    when the browser first requests , the browser :

     

    • open TCP connection
    • Initiate the TLS handshake with server name "aaa"
    • receive the browser with aaa.yyy.com certificate
    • display SSL error, the user accept the SSL error
    • send request for
    • receive the redirect to https://aaa.yyy.com

    you can create a certificate for aaa sign by your internal CA (imported in browsers trusted CA) and enable SNI

     

  • Dinesh3888's avatar
    Dinesh3888
    Icon for Nimbostratus rankNimbostratus
    May 19, 2018

    Thanks Piron. Do we need to import the private cert in all users browser?

     

    • Stanislas_Piro2's avatar
      Stanislas_Piro2
      Icon for Cumulonimbus rankCumulonimbus
      May 21, 2018

      So I guess this certificate authority is already added as trusted CA on all AD computers.

       

      If it is, there is no more action to be done on computers.