For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Javier_Somoza_3's avatar
Javier_Somoza_3
Icon for Nimbostratus rankNimbostratus
Sep 18, 2017

Publishing a website with SSL using an internal certificate

Hi all   Im using F5 BIGIP v13 as reverse proxy to publish some websites. When publishing using SSL with a 3rd party certificate it works. But now im trying to publish an internal site with a cert...
devops
LTM
eben's avatar
eben
Icon for Nimbostratus rankNimbostratus
Sep 18, 2017

Hi Javier,

 

How are you accessing the virtual server? ; or

 

Make your browser trust your internal CA certificate. Shows that the cert is self-signed.

 

CN = myou? this should be a fully qualified domain name.

 

Javier_Somoza_3's avatar
Javier_Somoza_3
Icon for Nimbostratus rankNimbostratus
Sep 18, 2017

The browser simply returns ERR_CONNECTION_RESET

 

I havent explained correctly, but the correct connection flow would be:

 

Client --> F5 (VS Rev.Proxy) --> F5 (VS Balanced Web Servers) --> Web Server nodes

 

I think the problem is not at the serverssl profile level because i cannot see any packet using tcpdump destinated to the second VS (the balancing one) when causing the problem in the browser. Anyway tried the serverssl profile insecure-compatible but no success.