For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Jake_39981's avatar
Jake_39981
Icon for Nimbostratus rankNimbostratus
Mar 05, 2012

Chain Certificates / Client SSL Profile

We have one Virtual Server and client SSL profile shared by multiple clients coming in. One client is presenting a client cert signed by an intermediary "VeriSign Class 3 Extended Validation SSL CA" ...
config
design
Nick_T_68319's avatar
Nick_T_68319
Icon for Nimbostratus rankNimbostratus
Mar 07, 2012
I agree with hoolio.

 

 

I have the same configuration, but I choose to keep the two Verisign intermediate certs in their own bundle. So I created a cert called verisign-intermediate-ca, and imported both the Primary and Secondary intermediary cert into it. I find this easier to manage than appending it into the same cert. That way if I ever need to update the intermediaries, I don't have to touch every SSL cert. Or when I renew an SSL cert, I don't have to worry about including the Intermediary.