Forum Discussion

Dazzla_20011's avatar
Dazzla_20011
Icon for Nimbostratus rankNimbostratus
Mar 25, 2011

Server-side SSL

Hi,     Currently we only do client-side SSL on the F5. I've been asked if we can encrypt the traffic from the F5 to web servers. I know the F5 can do server side ssl so just wonderered if some...
config
design
nitass's avatar
nitass
Icon for Employee rankEmployee
Oct 17, 2011
I was checking serverssl profile configuration & have not seen option to send f5 certificate ( client certificate) to server.it is certificate and key setting.

 

 

When server send its ssl certificate to f5 ( client ) , why LTM need server's key...Isnt it private to the server bigip does not need server (pool member)'s private key. the certificate and key i said is client's certificate and key which bigip has to present to pool member in case the pool member requires client certificate authentication. if the pool member does not do client certificate authentication, no certificate and key is needed to set in serverssl profile.

 

 

sol11220: Overview of the Server SSL profile

 

http://support.f5.com/kb/en-us/solutions/public/11000/200/sol11220.html