F5 is upgrading its customer support chat feature on My.F5.com. Chat support will be unavailable from 6am-10am PST on 1/20/26. Refer to K000159584 for details.

Forum Discussion

JG_249184's avatar
JG_249184
Icon for Altocumulus rankAltocumulus
Jun 20, 2018

Denying SSL client untrusted CERT connections

Is there a way to deny a client request connecting to https when it gets the untrusted cert error? I want to roll out a private trusted root certificate along with an intermediate chain on internal t...
application delivery
BIG-IP
iRules
Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Sep 28, 2018

The simple answer is no though. You cannot control the behavior of the client. HSTS provides that the client always talks to the server over HTTPS, and certificate pinning only ensures that there's no MITM.