For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

F599's avatar
F599
Icon for Nimbostratus rankNimbostratus
Feb 04, 2025

Problem with self-signed certificate

We have a self-signed certificate on a Back End server. However, this certificate is not secure. I need F5 to ignore the untrusted certificate and apply a certificate that I configured in the SSL p...
announcement
application delivery
F599's avatar
F599
Icon for Nimbostratus rankNimbostratus
Feb 07, 2025

Hello f51,

I performed this procedure, but it didn't work.
Yes, my VIP is using Protocol TCP.
Another detail, when I change from Standard to Performance Layer 4 the site works, but with an insecure application certificate.

 

F5 is not ignoring the self-signed certificate on the Back End server and is also not applying the certificate I configured.

VGF5's avatar
VGF5
Icon for Cumulonimbus rankCumulonimbus
Feb 08, 2025

Is that Possible to post the logs? 

Try below steps too.

touch /config/ssl/empty-ca.crt

tmsh modify ltm profile server-ssl my_server_ssl_profile ca-file /config/ssl/empty-ca.crt

tmsh modify ltm profile server-ssl my_server_ssl_profile ca-file /config/ssl/empty-ca.crt