For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Moussa_254150's avatar
Moussa_254150
Icon for Nimbostratus rankNimbostratus
Sep 08, 2016

Certificate Location

Hi Guys

 

is there an option to verify where a certificate resides without accessing the Big-IP or the servers behind it. using openssl or any other tool ?

 

in the following scenarios

 

1) SSL offload in place => certificate on Big-IP

 

2) No SSL offload => certificate on the webserver

 

application delivery
BIG-IP
security

2 Replies

  • IainThomson85_1's avatar
    IainThomson85_1
    Icon for Cumulonimbus rankCumulonimbus
    Sep 08, 2016

    I'm going to put my opinion on "no"

     

    The F5 is usually meant to be transparent to the end user, SSL - or non-ssl.

     

    However there are greater minds out there that might be able to disagree with me.

     

    Whats the driver for needing to know ?

     

    • Moussa_254150's avatar
      Moussa_254150
      Icon for Nimbostratus rankNimbostratus
      Sep 08, 2016

      Hi Iain, thanks for your response , in fact i have some certificates needs to be updated where i have no Access either to BIgIP which is managed by a vendor or to the App servers.

       

      to avoid the delay in getting the info from both sides which usually takes up to 10 days , i am attempting to get the information my self in quick manner so i can address the certificate update task to the concern team directly.