Forum Discussion

newf5learner_13's avatar
newf5learner_13
Icon for Nimbostratus rankNimbostratus
Mar 01, 2016

F5 SSL bridging question..

Hi, I have a Apache server and with a webpage mesh.pens.com, I have configured a VIP so that my F5 can be used for ssl bridging between client and Apache server. client ---> F5 VIP (client ssl,...
application delivery
LTM
TMSH
Salim_83682's avatar
Salim_83682
Historic F5 Account
Mar 01, 2016

Hi,

 

You don't need to configure a certificate and a key in your serverssl profile. This is only required if you want your BIG-IP to authenticate to your Apache HTTPS server using a SSL certificate. Use the default serverssl profile and you should be fine.

 

Salim

 

  • newf5learner's avatar
    newf5learner
    Icon for Nimbostratus rankNimbostratus
    Mar 01, 2016
    Yes, I didn't configure any certificate and Key on server ssl profile. Its the default one.
  • Salim_83682's avatar
    Salim_83682
    Historic F5 Account
    Mar 01, 2016
    I see application data being exchanged in your capture between BIG-IP and Apache, do you see any HTTP requests/responses logged in your access.log on the server ? Can you try from BIG-IP ? curl -k -H "Host: mesh.pens.com" https://192.168.220.214/ If it doesn't work, try the ssl logs on your server maybe ?