Forum Discussion

Joe_L's avatar
Joe_L
Icon for Nimbostratus rankNimbostratus
May 17, 2019

HTTP profile & SSL profiles not playing nice.

So I am attempting to set up a VS that is HTTPS (443) listening and HTTPS (443) pool members. I use a standard VS. Here is where it gets interesting. If I DO NOT use an HTTP profile the HTTPS/SSL con...
BIG-IP Access Policy Manager (APM)
certificate
https
LTM
security
ssl
tcp
Lee_Sutcliffe's avatar
Lee_Sutcliffe
Icon for Nacreous rankNacreous
May 17, 2019

Hey Joe,

 

when you you do not have an HTTP profile for an HTTPS virtual server, only the TCP connection is proxies, SSL is passed through to the pool members.

 

Once the HTTP profile is added to the VS, you have put it in full layer 7 mode and SSL will be terminated on the VS. This means you need to add a clientssl profile to the virtual server, or it will reject the connection. This is by design.

 

Whilst you will get a certificate error, are you able to the default clientssl and serverssl profiles on the VS along with an HTTP profile.

If this works the problem may be an issue with one of the SSL profiles you have applied.