SSL offload for LDAPS.

Yes, if client and server SSL profiles are removed things work fine.

 

 

Background...

 

The driving force behind the effort was to have a single cert that my group would need to manage (i.e. imports into App Server Trust store, etc...). Currently there is a small number of LDAP servers behind the VS, but should that grow in the future we would find ourselves in a position that would require management of 1 cert per node in all of our app server environments We are currently running in production with no SSL offload, however, it is mandated that all of our traffic be encrypted end-to-end. So if we want to offload, we have to use both client-side and server-side.