For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

eesun_276598's avatar
eesun_276598
Icon for Cirrus rankCirrus
Oct 12, 2016

Cert chain should exist in both server and client PC?

Can I say, if we want " CA root cert ----- intermediate cert ----- client cert" to work, the chain should exist in both server and client PC? Thank you  
application delivery
LTM
eesun_276598's avatar
eesun_276598
Icon for Cirrus rankCirrus
Oct 12, 2016

Please see the below two options in F5, F5 is proxy for the server behind it, why the step has two options: Client and Server?

 

Local Traffic ›› Profiles : SSL : Client >>>

 

Local Traffic ›› Profiles : SSL : Server >>>

 

  • Shaun_Simmons1's avatar
    Shaun_Simmons1
    Icon for Altostratus rankAltostratus
    Oct 12, 2016

    Local Traffic ›› Profiles : SSL : Client >>> Refer to: https://support.f5.com/kb/en-us/solutions/public/14000/700/sol14783.html

     

    The BIG-IP Client SSL profile enables the BIG-IP system to accept and terminate client requests that are sent using a fully SSL-encapsulated protocol and provides a number of configurable settings for managing client-side Secure Socket Layer SSL connections.

     

    Local Traffic ›› Profiles : SSL : Server >>> Refer to: https://support.f5.com/kb/en-us/solutions/public/14000/800/sol14806.html `The BIG-IP Server SSL profile enables the BIG-IP system to initiate secure connections to your SSL servers by using a fully SSL-encapsulated protocol and providing configurable settings for managing server-side SSL connections.