Forum Discussion

GavinW_29074's avatar
GavinW_29074
Icon for Nimbostratus rankNimbostratus
Jan 16, 2012

Catch specific SSL errors/failures???

Hi there     One of the requirements that I've been given is to try and catch certain SSL errors and return a more friendly error page, rather than the browser default...     A couple of ...
application delivery
dev
devops
iRules
nitass's avatar
nitass
Icon for Employee rankEmployee
Jan 17, 2012

You should probable also add a check that [SSL::cert 0] ne "" before checking SSL::verify_result doesn't return 0 for an invalid cert. since it does not return 0, bigip should respond with 403, shouldn't it?

 

[root@ve1023:Active] ssl  curl -ik https://172.28.19.79 --cert ssl.crt/default.crt --key ssl.key/default.key
HTTP/1.0 403 Forbidden
Server: BigIP
Connection: Keep-Alive
Content-Length: 23

self signed certificate