Forum Discussion

romolo82's avatar
romolo82
Icon for Cirrus rankCirrus
Jul 06, 2023

SSL length key

Hi, a client is trying to reach a VS on BIG-IP system with a SSL key. That key is regularly trusted on the load balancer and its CA root and intermediate too, ma load balancer refused the communica...
application delivery
  • Paulius's avatar
    Paulius
    Jul 06, 2023

    romolo82 This is a hard restriction from my understanding and that's a fairly recent article update so I do not see this being supported in the near future. I would even try not to use 4096 keys because I believe that still reduces your SSL transactions by half compared to 2048 keys.

whisperer's avatar
whisperer
Icon for MVP rankMVP
Jul 06, 2023

Use 2048 keys.

If something more exotic is needed... pass it through and have the backend server check/verify instead.

 

  • romolo82's avatar
    romolo82
    Icon for Cirrus rankCirrus
    Jul 07, 2023

    Unfortunately it's a company's policy have SSL termination on the LB... I believe that using 2048 key is the only possibility.