SSL Certificate Testing while servers not configured
I have setup an HTTPS VIP and I can see that all the servers are green (connectivity is OK) hence the VIP is showing green as well. The issue is that Apache has not been confgured yet so in theory the server wont return anything.
Is it normal that I get a certificate error from the browser when I try to connecto the SSL VIP? The certificate is installed and is from Untrust and the VIP is configured to terminate SSL (client) then re-initiate SSL to the server.
I was kind of hoping to get a page not found error since Apache is not configured on the server but not the certificate error.
Can you please advise?
Yes, it is normal, because the BigIP is a full proxy.
Your client will establish a connection to the bigIP independently, and then the bigip will establish a connection to the backend server. The two are independent, and the client connection will have to complete before bigip establishes a server connection.
Since you have an SSL profile on the VIP, then the client is going the whole length to complete the SSL handshake, and then send the GET request. So you get the ssl certificate warning because you need to trust the certificate in order for the handshake to complete.