Forum Discussion

Enes_Afsin_Al's avatar
Enes_Afsin_Al
Icon for MVP rankMVP

Hi ck_Bengre,

Can you try sending a curl request to the server from the F5 command line?

curl -kv "https://100.19.10.10" -H "Host: one-test-dev.trading.net"
Blue_whale's avatar
Blue_whale
Icon for Cirrocumulus rankCirrocumulus
Oct 28, 2021

 , I have to request our client team to execute this command .Can you please tell me what is expected from this command .

 

 

  • Enes_Afsin_Al's avatar
    Enes_Afsin_Al
    Icon for MVP rankMVP
    Oct 29, 2021

    If the command returns an SSL error, there may be SNI problem.

    https://support.f5.com/csp/article/K41600007

     

    If the command returns page content, can you try change server ssl profile to serverssl-secure?

  • Blue_whale's avatar
    Blue_whale
    Icon for Cirrocumulus rankCirrocumulus
    Nov 04, 2021

     you are right , client has resolved the issue by creating new VIP for this url and on the server ssl profile they have enabled "default SSL profile for SNI"...

     

    But the question is - How did it was working earlier without any SNI enabled on server ssl profile .

     

    What is the need to have SNI enabled on the ServerSSL profile . Do we not have any option to configure SNI on the Backend server directly ?