Forum Discussion

Rabbit23_116296's avatar
Rabbit23_116296
Icon for Nimbostratus rankNimbostratus
May 08, 2014

F5 GTM iquery woes

have two stand-alone GTM devices in opposing DCs and struggling to get the sync-group up and running. is it OK to use the same wildcard certificate bound as a device certificate for the iquery commun...
BIG-IP DNS
  • mimlo_61970's avatar
    mimlo_61970
    May 09, 2014

    I had this same problem with certs from an internal CA. I figured out I had to load the CA certs under Global Traffic/Servers/Trusted Server Certificates. Putting them under Systtem/Device Certificates/Trusted Device Certificates was not enough. This was with 11.2.1

     

Rabbit23_116296's avatar
Rabbit23_116296
Icon for Nimbostratus rankNimbostratus
May 08, 2014

GTM sync group. We are trying the wildcard certificate key / trusted device cert but its not happy. That's why I wasn't sure if I need to use the F5 self signed certs and import the opposing cert in the other GTM appliance.

 

iqmgmt_ssl_connect: SSL error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed May 8 15:51:15 lhr4-lb-01 err gtmd[6453]: 011ae0fa:3: iqmgmt_ssl_connect: SSL error: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed (336134278)