For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Militza's avatar
Militza
Icon for Nimbostratus rankNimbostratus
Mar 20, 2025

SNI Sites not taking correct certificate.

I have configured one VIP with two certificate  aks.test.com aks4.test.com On SSL profile for aks.test.com i have enabled SNI feature and aks.test.com is working fine taking correct certificate (a...
application delivery
asm
bigip
dns
gtm
irule
LTM
LTM VE
security
ssl
F5_Design_Engineer's avatar
F5_Design_Engineer
Icon for MVP rankMVP
Mar 21, 2025

Hi Militza,

 

You can use the openssl command-line tool to check if SNI is configured correctly.

Here's a command you can run:

openssl s_client -servername aks4.test.com -connect aks4.test.com:443 -tlsextdebug

This command will show you the details of the SSL/TLS handshake, including whether the server is using the correct certificate for the specified hostname

Check and share the test results.

Militza's avatar
Militza
Icon for Nimbostratus rankNimbostratus
Mar 21, 2025

openssl can not use.

  • boneyard's avatar
    boneyard
    Icon for MVP rankMVP
    Mar 30, 2025

    you should be able to use it from the BIG-IP itself.