Forum Discussion

Patrick201507_2's avatar
Patrick201507_2
Icon for Nimbostratus rankNimbostratus
Aug 28, 2016

irule to redirect from old domain to new domain name when using https not work

Hi,

 

Thanks for your help first. I have create a irule to redirect from one old domain name to a new domain name, I've applied the irule to both http and https VS: for example: when using http://www.olddomain.com, it works, it can redirect to https://www.newdomain.com;

 

but when using https://www.olddomain.com, it did not work, the browser display certificate warning saying that hostname and the certificate name did not match.

 

it seems that the connection did not reach the VS's irule. Any idea?

 

Thanks

 

Patrick

 

application delivery
BIG-IP

3 Replies

Sort By
  • Zeeshan_Ahmad_1's avatar
    Zeeshan_Ahmad_1
    Icon for Nimbostratus rankNimbostratus
    Aug 28, 2016

    If you have a SSL certificate for the single domain for example for www.newdomain.com domain only then it will give the SSL warning, the reason is HTTP_REQUEST event will occur once the SSL handshake will be completed so if the Ceritificate does not match the hostname in the request, or Date is not valid or its not form Certificate Authority it will display the error.

     

  • Vijay_E's avatar
    Vijay_E
    Icon for Cirrus rankCirrus
    Aug 28, 2016

    1.TCP Handshake

     

    2.SSL Hanshake

     

    3.HTTP Request/Response

     

    In the above steps, if you don't have the right SSL certificate as noted by Zeeshan, SSL error will be thrown. You can accept the "insecure" certification and you will see the redirect.

     

    You can also test it out by using curl:

     

    1. curl -I https://www.olddomain.com

       

    2. curl -Ik https://www.olddomain.com

       

    1st option will throw cert error. 2nd option will force the next step (HTTP Request/Reponse) regardless of cert error.

     

  • Patrick201507_2's avatar
    Patrick201507_2
    Icon for Nimbostratus rankNimbostratus
    Aug 29, 2016

    Hi Zeeshan, Oaddh,

     

    Thanks for your quick response, I fully understood now.

     

    with best regards, Patrick