Forum Discussion

Mohammad_B_Shai's avatar
Mohammad_B_Shai
Icon for Nimbostratus rankNimbostratus
May 30, 2019

SSL Bridging- Certificate usage

Hi Everyone,   Could you please let me know if we can use the client certificate which we used in client profile for Server profile as well . If not ,then why we should not use it .   Thanks...
application delivery
BIG-IP
LTM
Dario_Garrido's avatar
Dario_Garrido
Icon for MVP rankMVP
May 30, 2019

A server SSL profile is the way you have to configure TLS communication between F5-Backend (remember that the TLS communication is iniciated in the client with a TLS Hello message).

This communication could be established only using one certificate-key in your backend server or using a certificate-key in both sides (F5 server-side and backend server).

For this reason, you can have a server SSL profile using certficate-key or not.

# list ltm profile server-ssl serverssl { cert key }   
 
ltm profile server-ssl serverssl {
 
  cert none
 
  key none
 
}
 
 
 
# list ltm profile server-ssl serverssl-test { cert key }
 
ltm profile server-ssl serverssl-test {
 
  cert mycert_test.crt
 
  key mycert_test.key
 
}

There is no specific considerations in your Server SSL configuration.

KR,

Dario.