Forum Discussion

jforaker's avatar
jforaker
Icon for Nimbostratus rankNimbostratus
Mar 10, 2014

Client SSL profiles using SNI not able to use the subject alternative name

We have a clientssl profile using a *.domain.com wildcard SSL certificate. This profile is set as the default for SNI. We also have specific clientssl profiles using the application specific SSL cer...
application delivery
client-side
clientssl
deployment
LTM
sni
Thomas_50423's avatar
Thomas_50423
Icon for Nimbostratus rankNimbostratus
Apr 09, 2014

Hi Jeff,

 

I had to deal with SSL configuration on F5 some time ago. I didn't especially work on SNI but I think you can declare multiple domains (including wildcards) in the "Server Name" field of your client ssl profile (cf. http://support.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/ltm-concepts-11-1-0/ltm_ssl_profiles.html). Simply separate each entry by a comma, let's say something like this in your case :

 

Server Name "preview.application.com,pre-pub.application.com,preview.differentapplication.com,pre-pub.differentapplication.com"

 

Or using wildcards :

 

Server Name "*.application.com,*.differentapplication.com"

 

Note that multiple domain names is only applicable for client ssl profiles and not server ssl profiles

 

Let us know about this configuration if you test it

 

Cheers