Forum Discussion

Neil_Marks's avatar
Neil_Marks
Icon for Nimbostratus rankNimbostratus
Nov 26, 2019

Debugging ServerSSL Profile Setup

So I have a setup which basically is as follows: F5 LTM (terminates external https traffic) this needs to re-encrypt to a NGINX server, which is setup to passthrough traffic to a HA Proxy service wh...
application delivery
BIG-IP
LTM
ssl
nathe's avatar
nathe
Icon for Cirrocumulus rankCirrocumulus
Nov 26, 2019

Neil,

 

Can you confirm your ServerSSL setup? See ServerSSL Overview page, To troubleshoot have you tried using the default ServerSSL profile? As mentioned in the link above, when a serverssl profile is added the bigip is acting as a client and uploading a cert means the bigip presents this as a client certificate to the pool member. From your description i'm not sure this is what you are after.

 

If you want to validate the certificate from the pool member then in the Server Authentication settings part you can specific the domain name of the certificate expected.

 

Hope this helps,

 

N