Forum Discussion
boommen_197293
Nimbostratus
NimbostratusRegarding client and server side offloading
Hey all,
Here's the configuration I need to get working:
WebPortal{443} (not on load balancer) -> VS{443} -> nodes{443}
due to client requirements, the nodes must serve up content on ...
but when generating the server side CSR, does the CN need to match that, or can it be named anything i choose?
certificate/key in serverssl profile is used when pool member does client certificate authentication (bigip acts as client to pool member). in short, you should not need it and can set certificate/key to none.
sol14806: Overview of the Server SSL profile (11.x)
https://support.f5.com/kb/en-us/solutions/public/14000/800/sol14806.html
nitass
Employee
Employeebut when generating the server side CSR, does the CN need to match that, or can it be named anything i choose?
certificate/key in serverssl profile is used when pool member does client certificate authentication (bigip acts as client to pool member). in short, you should not need it and can set certificate/key to none.
sol14806: Overview of the Server SSL profile (11.x)
https://support.f5.com/kb/en-us/solutions/public/14000/800/sol14806.html
boommen_197293Thanks for the reply nitass, when i set the cert and key to none, my connection fails. I must be configuring something incorrectly. Your response does help me understand the server side role better though- nitassyou may try tcpdump/ssldump to see what the wrong is.