For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

kridsana's avatar
kridsana
Icon for Cirrocumulus rankCirrocumulus
Mar 03, 2023

Did Serverssl profile require certificate?

Hi We want to use F5 as SSL bridging (Decrypt using ssl client profile and re-encrypt using serverssl profile) Problem is our server using self-sign root certificate and certificate name is IP se...
application delivery
certificate
client
self-sign
server
ssl
kridsana's avatar
kridsana
Icon for Cirrocumulus rankCirrocumulus
Mar 04, 2023

Hi Mohamed_Ahmed_Kansoh 

Thank you for explanation. I now understand F5 doesn't need to import root self-sign certificate of server into F5.

Can I ask one more question?

What happen if server IP 10.10.10.10 but they have certificate name different (not 10.10.10.10) ?  .... eg. CN is server hostname or have CN as ip 192.168.1.1 

Will F5 still ignore trust certificate and everything still working fine?

 

Mohamed_Ahmed_Kansoh's avatar
Mohamed_Ahmed_Kansoh
Icon for MVP rankMVP
Mar 05, 2023

Yes kridsana , 

It should work , Bigip ignores any certificate comes from server / pool members ...