Forum Discussion
hooleylist
Oct 19, 2010Cirrostratus
Hi Ky,
It's possible to set a client SSL profile from an iRule using SSL::profile $clientssl_profile_name to switch which cert LTM presents the client. However, it's not practical with a typical user base (XP clients) to check which hostname the client is requesting and then specify the client SSL profile.
You can read about this here:
http://en.wikipedia.org/wiki/Server_Name_Indication
Note that XP doesn't support SNI for any IE version.
If you can get a single cert which is valid for all of the hostnames, then you can avoid this issue of trying to select the correct server cert.
Aaron