Forum Discussion
Tom_Schaefer
Cirrus
CirrusConnecting to invalid Server with SERVERSIDE SSL
I must be reading the documentation wrong. I am trying to ensure a connection to an external TLS server has a valid CA and a valid certificate. I have a virt with a SERVER SSL profile that sets drop ...
Tom_SchaeferCirrus
CirrusI forgot to mention we are not yet on v13 (when SERVERSSL_SERVERCERT was added I believe). But forgetting the iRule for a moment, in just general LTM configuration, is there anyway to prevent the BIG-IP from connecting to the TLS server if the cert is not valid? I ask as even with drop, it still connects if the cert is expired or a bad CA. I'm wondering if those two options are just for CLIENTSSL and not SERVERSSL.
JG
Cumulonimbus
CumulonimbusWill you be able to share a screenshot of the section "Server Authentication" of your server-side SSL profile?
