Forum Discussion

Erik88's avatar
Erik88
Icon for Nimbostratus rankNimbostratus
Feb 24, 2020

Does server ssl profile check a web-server certificate validity ?

Hi :)   I would like to know if a self created ssl server profile can check if some web-servers pool have valid certificate. I have a full proxy, client side works properly and server side also ...
BIG-IP
certificates
Security
server-ssl-profile
ssl
Erik88's avatar
Erik88
Icon for Nimbostratus rankNimbostratus
Feb 24, 2020

Hi NAG,

 

Thanks for the answer, did it as you say but also fails.

 

Our certificate ans site are internal so in "Trusted Certificate Authorithy" box of server ssl profile i attach my bundle.

 

I did some test in this bundle certificate file, including different certificates:

1- Root + Intermediate + Server CA certificates

2- Only root file

3- Only Root + Intermediate CA certificates

4- Only Server CA certificates

 

All four previous files failed when try to reach web-server.

Doing a pcap i find this:

  • Level: Fatal (2)
  • Description: Handshake Failure (40)

 

Thanks :)