Forum Discussion
Michael_57131
Nimbostratus
NimbostratusOCSP Authenticatioin profile error with clients that don't know the certificate issuer?
If a web browser doesn't send the certification hierarchy to the F5 with OCSP authentication profile, will SSL client negotiation fail?
We have an OCSP responder and authentication profile set...
Sounds like your OCSP response is not valid. Can you verify by using openssl from the F5? openssl ocsp --issuer internal_CA.crt -cert my_client_cert.cer -text -url http://ocsp.internalca.org.
You should get a response back like: Cert Status: good
