For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Jake_39981's avatar
Jake_39981
Icon for Nimbostratus rankNimbostratus
Mar 05, 2012

Chain Certificates / Client SSL Profile

We have one Virtual Server and client SSL profile shared by multiple clients coming in. One client is presenting a client cert signed by an intermediary "VeriSign Class 3 Extended Validation SSL CA" ...
config
design
kev_245_28249's avatar
kev_245_28249
Icon for Nimbostratus rankNimbostratus
Apr 03, 2012
Hoolio,

when you say "The client should check its client cert against each of the intermediate certs in the bundle that TMM sends during the SSL handshake"

 

 

 

When a profile is attached with a 'chain certificate' it will not stop TMM also using the ca-bundle?

 

 

 

I successfully created a certificate chain for a private Ca issuer, however we still need to issue the requestor with the signed cert, and thus I realised that it would work without having to create a chain cert.

 

This brings me to, when is a chain certificate required to be built?