Forum Discussion

Michael_-_Harr1's avatar
Michael_-_Harr1
Icon for Nimbostratus rankNimbostratus
Mar 18, 2015

Issue with new VeriSign certificate clients unable to access website we went from sha 128 to sha-256

Issue with new VeriSign certificate clients unable to access website we went from sha 128 to sha-256. The F5 is not rendering the site. I can access the server from one server to the other and the si...
design
Michael_-_Harr1's avatar
Michael_-_Harr1
Icon for Nimbostratus rankNimbostratus
Mar 19, 2015

1.Are you terminating (or bridging) SSL on the ADC? SSL is terminating on the server 3.Does an SSL Labs report reveal anything? Does F5 support put it in a lab environment is that what you mean? 4.If you're terminating/bridging, did you update the CA bundle on the ADC? Yes the CA bundle is on the ADC 5.Are you using iApps? No IAPPS

 

Alan_Renicor_10's avatar
Alan_Renicor_10
Icon for Altocumulus rankAltocumulus
Mar 19, 2015
For Point 3 , if your connection is internet facing I beleive Arie is suggesting going to https://www.ssllabs.com/ssltest/ and testing your domain to see if it flags up any issues such as incorrect ca's or possible cipher issues. You can also test your ssl cert and ca's via https://www.sslshopper.com/ssl-checker.html.