Forum Discussion
Vishwanath
Nimbostratus
NimbostratusServer-ssl profile
I have a VIP configured with both client-ssl and server-ssl. Certify on ltm is fine whereas certificate on server expired. Still VIP is working fine. I have a question y I am not getting any warning or error or it is a default feature of vip of ignoring the error?
Can we change the settings, if yes then where? so that i should get a warning?
4 Replies
Yann_DesmarestCirrus
Hello,
It's not by design. But you can configure server authentication on the sslserver profile and use "Expire Certificate Response Control" and "Untrusted Certificate Response Control" options
- Yann_DesmarestMaybe you can try to play with an irule and Server side SSL events together with the following command : https://devcentral.f5.com/wiki/iRules.SSL__verify_result.ashx
Yann_Desmarest_Nacreous
Hello,
It's not by design. But you can configure server authentication on the sslserver profile and use "Expire Certificate Response Control" and "Untrusted Certificate Response Control" options
- Yann_Desmarest_Maybe you can try to play with an irule and Server side SSL events together with the following command : https://clouddocs.f5.com/api/irules/SSL__verify_result.html
