ServerSSL - Logging on certificate check failiure

I've had another go using SSL:verify_result

 

when SERVERSSL_HANDSHAKE { 
 set cert [X509::verify_cert_error_string [SSL::verify_result]]  
 log local0.info "Certificate verify status:"   
 log local0.info $cert 
 }

 

 

I then set Server Certificate to IGNORE (As SERVERSSL_HANDSHAKE events won't fire unless the validation is sucessful, and instead i want to do with validation with the iRule). When i do this, i get the following

 

 

Oct 22 10:22:40 tmm tmm[1672]: Rule IPP_SSLError_Test : Certificate verify status: 
 Oct 22 10:22:40 tmm tmm[1672]: Rule IPP_SSLError_Test : ok

 

 

However, with this specific server the SSL certificate is invalid and gets rejected when Server Certificate is set to REQUIRE.

 

Surely if the certificate is being rejected when REQUIRE, then i shouldn't be getting an "Ok" response code when i'm asking the F5 what the validation status is?

 

 

Any insight would be appreciated.