Forum Discussion

smp_86112's avatar
smp_86112
Icon for Cirrostratus rankCirrostratus
Dec 15, 2011

Managing SSL Certificate Bundles

We are about changing SSL vendors, and it appears their root is already in the build-in "ca-bundle". However, their intermediates are not. I wanted to get some feedback on the right way to manage thes...
config
design
smp_86112's avatar
smp_86112
Icon for Cirrostratus rankCirrostratus
Dec 16, 2011
Thanks Hamish. We got a certificate from our new vendor. Then I created a new client SSL profile with the cert/key, but left the Chain and Trusted Certificate Authorities values set at None. Finally I applied to a VIP. But when I hit the VIP, the cert validates just fine.

 

 

How can that be? I though the LTM presented the certificates in the Chain bundle during the key exchange? Seems like the client doesn't care what the Chain or Trusted Certificate Authorities value is set to in the Client SSL Profile?