For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Tom_Schaefer's avatar
Tom_Schaefer
Icon for Cirrus rankCirrus
Aug 09, 2019

Connecting to invalid Server with SERVERSIDE SSL

I must be reading the documentation wrong. I am trying to ensure a connection to an external TLS server has a valid CA and a valid certificate. I have a virt with a SERVER SSL profile that sets drop ...
application delivery
iRules
LTM
JG's avatar
JG
Icon for Cumulonimbus rankCumulonimbus
Aug 13, 2019

The result is expected for the configuration you have.

 

You need to change "Server Certificate" from "ignore" to "require", and enter the name defined as "Common Name (CN)" in the SSL certificate of your app server in the field "Authenticate Name". Make sure you choose a CA bundle that can validate the SSL certficate of your app server in the field "Trusted Certificate Authorities".

 

Apply the irule above to log the validation result to assist troubleshooting.

Tom_Schaefer's avatar
Tom_Schaefer
Icon for Cirrus rankCirrus
Aug 13, 2019

One more point,. that iRule will have to wait until we are on v13 as that event is new to v13.