Forum Discussion

Enes_Afsin_Al's avatar
Enes_Afsin_Al
Icon for MVP rankMVP
Oct 28, 2021

Hi ck_Bengre,

Can you try sending a curl request to the server from the F5 command line?

curl -kv "https://100.19.10.10" -H "Host: one-test-dev.trading.net"
  • Blue_whale's avatar
    Blue_whale
    Icon for Cirrocumulus rankCirrocumulus
    Oct 28, 2021

     , I have to request our client team to execute this command .Can you please tell me what is expected from this command .

     

     

    • Enes_Afsin_Al's avatar
      Enes_Afsin_Al
      Icon for MVP rankMVP
      Oct 29, 2021

      If the command returns an SSL error, there may be SNI problem.

      https://support.f5.com/csp/article/K41600007

       

      If the command returns page content, can you try change server ssl profile to serverssl-secure?

    • Blue_whale's avatar
      Blue_whale
      Icon for Cirrocumulus rankCirrocumulus
      Nov 04, 2021

       you are right , client has resolved the issue by creating new VIP for this url and on the server ssl profile they have enabled "default SSL profile for SNI"...

       

      But the question is - How did it was working earlier without any SNI enabled on server ssl profile .

       

      What is the need to have SNI enabled on the ServerSSL profile . Do we not have any option to configure SNI on the Backend server directly ?