Forum Discussion
F599
Nimbostratus
NimbostratusProblem with self-signed certificate
We have a self-signed certificate on a Back End server. However, this certificate is not secure. I need F5 to ignore the untrusted certificate and apply a certificate that I configured in the SSL p...
Mayur_Sutare
MVP
MVPHi F599
When you use Performance Layer 4 type Virtual server, SSL/TLS will be terminated on the backend server. In this case, F5 do not have any control on it. So, whatever certificate is available on the backend server, will be presented to the client. Same is happening in your case. And this is not an issue. It is as per the design and how packet is being handle.
With Standard type of virtual server type, you can manage SSL configurations on the F5.
Check this article to understand how sessions get established with each type of virtual server.
Overview of TCP connection setup for BIG-IP LTM virtual server types
Could you please confirm below points?
- Did you map client-ssl profile and server-ssl profile to Standard type of virtual server?
- If yes, what is the behaviour with this setup? Is SSL handshake successful or is there any error?
