Forum Discussion

boommen_197293's avatar
boommen_197293
Icon for Nimbostratus rankNimbostratus
May 15, 2015

Regarding client and server side offloading

Hey all,   Here's the configuration I need to get working:   WebPortal{443} (not on load balancer) -> VS{443} -> nodes{443}   due to client requirements, the nodes must serve up content on ...
application delivery
design
LTM
  • nitass_89166's avatar
    nitass_89166
    May 15, 2015

    but when generating the server side CSR, does the CN need to match that, or can it be named anything i choose?

     

    certificate/key in serverssl profile is used when pool member does client certificate authentication (bigip acts as client to pool member). in short, you should not need it and can set certificate/key to none.

     

    sol14806: Overview of the Server SSL profile (11.x)

     

    https://support.f5.com/kb/en-us/solutions/public/14000/800/sol14806.html

     

nitass's avatar
nitass
Icon for Employee rankEmployee

but when generating the server side CSR, does the CN need to match that, or can it be named anything i choose?

 

certificate/key in serverssl profile is used when pool member does client certificate authentication (bigip acts as client to pool member). in short, you should not need it and can set certificate/key to none.

 

sol14806: Overview of the Server SSL profile (11.x)

 

https://support.f5.com/kb/en-us/solutions/public/14000/800/sol14806.html

 

nitass's avatar
nitass
Icon for Employee rankEmployee
May 15, 2015
you may try tcpdump/ssldump to see what the wrong is.