Forum Discussion

M_2's avatar
M_2
Icon for Altocumulus rankAltocumulus
Apr 02, 2015

Intermediate chain or Ca bundle in client and server ssl

Hello friends,   I am trying to understand the purpose or usage of chain certificate or ca bundle in client and server ssl profiles   Does the chain is required for all well known ca's...
Max_Q_factor's avatar
Max_Q_factor
Icon for Cirrocumulus rankCirrocumulus
Apr 03, 2015

I think you were asking 2 questions here:

 

1) On the Client SSL side if you are trying to put a server SSL certificate on the F5 you should include the Intermediate certificates so that the browser can trace the validity back to the browser's CA bundle which is a list of certificate authorities.

 

2) For the server SSL profile (if the profile is configured to enforce certificates) the CA bundle is used as a list of certificates authorities that the F5 trusts to generate certificates