Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

Forum Discussion

JBlogs_314812's avatar
JBlogs_314812
Icon for Nimbostratus rankNimbostratus
Sep 26, 2017

iQuery/ Big-IP DNS server certificate trust problem

Unable to establish iQuery between bigip devices. Connectivity is in place but failing with: SSL error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed I take this ...
application delivery
big-ip
BIG-IP DNS
certificate
iquery
ssl
Lee_Sutcliffe's avatar
Lee_Sutcliffe
Icon for Nacreous rankNacreous
Sep 26, 2017

It was a long time ago when I used intermediaries for setting up iQuery, however I did make some notes.

How have you added the intermediate? I used the following:

tmsh modify sys httpd ssl-certchainfile /config/httpd/conf/ssl.crt/your_ca_cert_chain.crt
(this instructs HTTPS to use the chain cert - so probably not what you need)

Then you need to add chain to two places, firstly the in GUI > Trusted Device Certs Secondly in Global Traffic/DNS Servers > Trusted Server Certificates.

Restart services: bigstart restart httpd gtmd big3d