JamesE_234305
Oct 17, 2017Nimbostratus
SSL Intercept SHA1 Certificate
I am trying to set up SSL intercept to decrypt outbound SSL for inspection. I am not doing anything fancy just a basic decryption zone between the internal and external F5. Everything works except for certain sites like google.com the F5 is issuing a SHA1 certificate to the client instead of SHA2 which is not supported in Chrome.
I opened a support ticket with F5 and the F5 engineer who answered the ticket made the following recommendation:
"configure a trusted certificate authority bundle in the server ssl profile. The default bundle contains many well-known public CA certs for server-side processing."
After I did this, the problem was solved.
Thanks.