F5 is upgrading its customer support chat feature on My.F5.com. Chat support will be unavailable from 6am-10am PST on 1/20/26. Refer to K000159584 for details.

Forum Discussion

Muhammad_Irfan1's avatar
Nov 07, 2014

Client side SSL profile, Root certificate is self-signed problem

I configured client side SSL profile and inserted the certificate which was made by client with .CSR file produced by F5. When tried to connect through browser i found that there was 4 certificate chain. I made a bundle of them and put them in certificate authority in Client authentication.

 

Now the problem is that client still can't make a handshake and Open ssl shows that root certificate is self-signed. I wonder what can i do now. Is there some how that ignore the root certificate self signed problem and authenticate it. 2ndly i dont know that whether F5 is saying that its self-signed or browser is saying this.

 

Please help

 

6 Replies

  • R_Eastman_13667's avatar
    R_Eastman_13667
    Historic F5 Account

    Depends on the browser you are using. You can configure Firefox to trust the CA's of the self-signed certificate.

     

    • Muhammad_Irfan1's avatar
      Muhammad_Irfan1
      Icon for Cirrus rankCirrus
      Well i configured it mozilla to use this certificate for trusting websites. Will check it tomorrow and will inform you.
  • shaggy's avatar
    shaggy
    Icon for Nimbostratus rankNimbostratus

    if i understand your issue correctly, you should select the bundle as the chain for the client-ssl profile. that will tie the bundle to the certificate assigned to the client-ssl profile

     

    • Yes i configured bundle in the chain. I did configured bundle in the Trusted certificate authorities.
  • if i understand your issue correctly, you should select the bundle as the chain for the client-ssl profile. that will tie the bundle to the certificate assigned to the client-ssl profile

     

    • Muhammad_Irfan1's avatar
      Muhammad_Irfan1
      Icon for Cirrus rankCirrus
      Yes i configured bundle in the chain. I did configured bundle in the Trusted certificate authorities.