Forum Discussion

Lamberto_Di_Meg's avatar
Lamberto_Di_Meg
Icon for Nimbostratus rankNimbostratus
Aug 03, 2018

F5 virtual server ignore SSL profile Certificate

Dear All,

 

we are facing a strange behavior on our f5 environment.

 

We have a web server (IIS) with a self signed certificate. We have configured a Virtual Server on F5 with a signed certificate by Comodo on the SSL Profile (client) but We are able to browse the web site even if the certificate on the web server and on the SSL Profile (server) are not the same.

 

Can anyone explain me what happen?

 

Kind Regards

 

application delivery
BIG-IP
LTM
security
  • Zuke's avatar
    Zuke
    Icon for Cirrostratus rankCirrostratus
    Aug 03, 2018

    You do not necessarily need a certificate for the server ssl profile. The default serverssl profile ignores the fact that there is a self-signed certificate and delivers the data without a warning page.

     

    Think of this as behaving as a -k switch when using the curl utility.