F5 is upgrading its customer support chat feature on My.F5.com. Chat support will be unavailable from 6am-10am PST on 1/20/26. Refer to K000159584 for details.

Forum Discussion

Muhammad_Irfan1's avatar
Nov 08, 2014

Root certificate is self signed error and page does not open.

I have SSL certificate and whole chain of it which made bundle and uploaded in chain and trusted certificate authorities in Client SSL profile.

 

Also added all the certificates of the chain in client machine. Now all the certificates authenticated but the problem is that it does not open the server page through VS. Client is offloaded on F5. Open SSL shows that the problem is that root certificate is self signed. Is this the problem of F5 or browser?

 

4 Replies

  • You want to do a verify on the certchain and client cert

     

    openssl verify -purpose sslclient -CAfile bundle.crt client.crt

     

    • Muhammad_Irfan1's avatar
      Muhammad_Irfan1
      Icon for Cirrus rankCirrus
      Thanks for the reply kunjan. I just added trust root certificate to open websites in firefox now all the certificates are verified and when i write https://10.50.171.5:7777 the page of webserver is open and client authentication is set to require that means now my certificates are working fine right? But when i put full url of the application it gives ssl handshake failure error on https://10.50.171.5:7777/ecommunications_enu/starts.swe?
  • kunjan's avatar
    kunjan
    Icon for Nimbostratus rankNimbostratus

    You want to do a verify on the certchain and client cert

     

    openssl verify -purpose sslclient -CAfile bundle.crt client.crt

     

    • Thanks for the reply kunjan. I just added trust root certificate to open websites in firefox now all the certificates are verified and when i write https://10.50.171.5:7777 the page of webserver is open and client authentication is set to require that means now my certificates are working fine right? But when i put full url of the application it gives ssl handshake failure error on https://10.50.171.5:7777/ecommunications_enu/starts.swe?