For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

dipta_03_149731's avatar
dipta_03_149731
Icon for Nimbostratus rankNimbostratus
Feb 11, 2016

Browser is throwing cert mismatch error inspite of having ssl offload on F5.

Below is the virtual server configuration. The VIP listens on port 443 and has ssl profile associated. Pool members are on port 80. Will the browser throw a certificate mismatch error?   ltm virtu...
LTM
security
Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Feb 11, 2016

The browser is going to throw a cert mismatch error if the X.509 subject (or subject Alt Name) of the server certificate defined in the client SSL profile does not match the host name requested by the client. If you can ignore the error in the browser, look at the properties of the certificate that it received from the BIG-IP. The certificate subject value should be the same as in the browser URL.