Forum Discussion
Ray_Morris_7896
Nimbostratus
NimbostratusServer SSL - Ignore bad certificates
Is there a way to use a proxy to make SSL connections to servers with bad certificates? (I know this smells really bad, but the customer requires this for a number of reasons...)
When I set up a ServerSSL proxy, I understand that the server certificate is still inspected for authenticity. Can this be circumvented? I expect the certificate to fail on all three dimensions of authorization (name, date, and root CA).
Thank you,
- Ray,
this is off-topic for this forum, but if I'm already at it ... You can switch off server certificate verification by specifying:serverssl server cert ignore
in you SSL proxy configuration. Please, refer to BIG-IP Reference Guide for details. 
Ray_Morris_7896My appologies. I assumed that an iRule would be the solution.
FYI, the solution is more than just choosing 'ignore'. You must use a loopback VIP.
Here are the details:
https://tech.f5.com/home/solutions/sol1587.html
Thanks,
R- SOL1587 is not relevant to the problem at hand. The virtual referenced by the proxy does not need to be attached to loopback address (but it is a good practice).
