For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

NewTOF501_15047's avatar
NewTOF501_15047
Icon for Nimbostratus rankNimbostratus
Apr 21, 2014

SSL client to f5 and f5 to websever

I want enable SSL between Client Web Browser and F5. SSL between F5 and webserver   Please advise steps  
Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Apr 21, 2014

If I may add a few thoughts:

 

  1. It doesn't appear that you have a server SSL profile applied to the VIP. In order to perform this "SSL bridging", you need a client SSL profile to first terminate the client side SSL, and then a server SSL profile to re-encrypt to the web server.

     

  2. If it's still not working, I would FIRST look at where it's failing. Because you're dealing with a full proxy here, if you TCPDUMP on either interfaces (client side or server side) you should see where the traffic is failing. For example, if client side SSL is failing, you shouldn't see traffic on the server side.

     

  3. Once you've determined where the problem is, you can then start looking at why it's failing. For this you can use a tool like SSLDUMP. It will generally, and not always intuitively, show you what's going on inside the SSL handshake, and will (sometimes) point right to the problem.