For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

BPetronio_11363's avatar
BPetronio_11363
Icon for Nimbostratus rankNimbostratus
May 11, 2010

Server SSL issue

Hello,

 

 

Im trying to configure a VS using two custom client and server SSL Profile.

 

 

I have 2 wildcard certificates for public and private zones. Both was named the same, *.companyname.com .

 

 

Whith the client ssl profile all works fine.

 

When i apply the server ssl profile, from the network outside, the browser presents the message, "the page cannot be displayed". Not even the public cert is shown...

 

 

From the tcpdump, i can see requests to real server, but no responses.

 

 

If i put other pc on the same network of the real server, i can open the site with the correct certificate shown.

 

 

 

Note:

 

The private certificate has the expired date setted to the year of 2107, which from whath i could read on the SOL8989, this is only cosmetic and it would work fine.

 

 

Any ideas to whath could be happening here ?

 

 

Best Regards,

 

Bruno Petrónio
config
design

1 Reply

  • Michael_Yates's avatar
    Michael_Yates
    Icon for Nimbostratus rankNimbostratus
    May 13, 2010
    Server SSL is only used if the Server also has an SSL Certificate applied to it.

     

     

    Client SSL - Presents the SSL Certificate to the User, decrypts the traffic (so that you can do any iRule Processing, or just SSL Off-Load).

     

    Server SSL - Re-Encrypts the traffic to go to the Server. (If the Server doesn't have an SSL Certificate on it).