Forum Discussion

mwi's avatar
mwi
Icon for Cirrus rankCirrus
Nov 25, 2024

Problem with lets encrypt and redirect after update

Hi, we have updated our BigIP last week from 15.x to 17.1.1.4, since then we are not able to get certificates from lets encrypt, if there is the _sys_https_redirect iRule active on the Virtual Serve...
LTM
Aswin_mk's avatar
Aswin_mk
Icon for Cumulonimbus rankCumulonimbus

Hello

I found this bug in 17.1.1.4, could u please check if it's relating to you

 

1369673-1 : OCSP unable to staple certificate chain

Links to More Info: BT1369673

 

Component: Local Traffic Manager

 

Symptoms:

When a server returns a certificate chain that involves an archived Let's Encrypt certificate, the OCSP is unable to staple the full chain.

 

Conditions:

An OCSP is configured on the serverside profile, and the client tries to connect to a server that returns certificate chain using an archived Let's Encrypt certificate.

 

Impact:

The OCSP is unable to staple the certificate chain. If the stapling is required by the client, the connection will be broken.

 

Workaround:None

https://techdocs.f5.com/kb/en-us/products/big-ip_ltm/releasenotes/related/relnote-supplement-bigip-17-1-1-4.html

 

Br

Aswin

mwi's avatar
mwi
Icon for Cirrus rankCirrus
Nov 26, 2024

Hi, no that has nothing to do with my Problem.