Forum Discussion
CirrusHow to redirect Https to Https respons ?
Hi Satriaji ,
Till now I do not see the issue exists on servers , also it is not doable for me to redirect server Responses to https.
>If you use client ssl , your traffic should return to clients Encrypted.
> Traffic should be returned from server to F5 Decrypted due to non existance of server ssl profile.
> if you were redirected after login , maybe you were redirected to another virtual serer using port 80.
> Are there any changes in your "hostname" After Loging directly , maybe the homepage redirects you to another domain after loging in.
so I susbect that your Requests are un trusted after loging in against this Client ssl not server.
I think the issue is still wiith Client ssl
you can clarify more if you need , I will follow up
CirrusDear Mohamed,
Here the config
Server Farm
===========
IP VS = 192.168.x.x port 443 (without use SSL profile at clientside profile)
Pool member = 10.45.x.xx port 443 ( its use to IP VS DMZ )
DMZ
======
IP VS = 10.45.x.x port 443 (its used to IP pool member Serverfarm) using SSL client side profile
Pool member= 10.43.x.x port 80 (server http)
When the user access https://abcd/otcs/login the homepages still https, but after login using user name and password, the homepage : http://abcd/otcs/login . They want to still https when login.
thankyou
Satriaji , Alright then.
it’s a strange behavior to me.
ِAnyway , I would Recommend to create new http virtual server , and assign a redirection iRule from http to https to force redirection of https always in path.
> when login and redirected to non secure http , you should be redirected again by the( new created virtual server + assigned Redirection iRule " http ــــ> https " use the default one )
> This below Redirection irule for the " new http virtual server "when HTTP_REQUEST { HTTP::redirect https://[getfield [HTTP::host] ":" 1][HTTP::uri] }Try it , I hope it works with you.
- Satriaji
Dear Mohammed,
The VS port 80 have been used for internal application, so we cann't create IP VS port 80. (cannot using step 1 to create VS port 80 then assign the irules_sys_redirect_https) because that IP VS & port 80 have been used.
So when the client access https://abc.com --> homepage become http://abc.com , so we must add or manually add "https://" in the browser so the app can be open.
Can we use this step on article https://support.f5.com/csp/article/K14775 ?
Hi Satriaji ,
Great , I think this KB should solve your issue.
you can try it and inform us if it resolved.
Goodluck.
