Certificate error message in big ip ltm

make sure your certificate contain Common name xray.csintra.net or use wild card certificate as *.csintra.com matching in your certificate so that you can get rid of certificate error

Cheers Snl

Hi Samit,

When client goes https://xray.csintra.net/x-ray/supervisor/ in his browser, the browser checks the certificate. If the certificate is having issue, you would get that error page. You need to see multiple factors here.

1. Is the certificate expired
2. Is the common name put in correctly.
3. Does it require xray.csintra.net added as SAN name, as the CN is different.

etc, etc.

Find the VIP of this setup. Goto the LTM. Find the corresponding client-ssl. Check the certificate of that. Renew/Update the certificate accordingly.

@Samit, I guess, your LB F5 VIP url & backend server host name doesn't match as per SSL cert. That is the reason you are getting SSl error. Please check that part.

Hi,

You can also do a workaround and configure the virtual server type as Forwarding and not Standard.

Is the backend server on HTTPS?

Hi,

You can also do a workaround and configure the virtual server type as Forwarding and not Standard.

Is the backend server on HTTPS?

I hope you are creating the correct ssl client profile by importing the correct key and certs and key(with password) if any.

Once that is done you need to append the profile to the vip listening on 443.

This is the only thing you need when you offload ssl to f5.

Thanks, Pankaj