For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Erik88's avatar
Erik88
Icon for Nimbostratus rankNimbostratus
Feb 24, 2020

Does server ssl profile check a web-server certificate validity ?

Hi :)   I would like to know if a self created ssl server profile can check if some web-servers pool have valid certificate. I have a full proxy, client side works properly and server side also ...
BIG-IP
certificates
security
server-ssl-profile
ssl
consul_2019's avatar
consul_2019
Icon for Cirrus rankCirrus
Feb 24, 2020

Hi, I follow your reasoning - it would be logical to assume that if you can access the server directly from your browser, cert should be ok. Yes, that's true from browser's perspective.

I would suggest take a capture on server side and check in Wireshark that you are definitely getting correct certificate back, and that you are definitely getting a certificate back (and that it's not empty for example). Bypassing F5 might seem like a good idea, but it is not a recommended way to troubleshoot these kinds of issues. :)

Thanks,

Alex