Forum Discussion
ryanph_121149
Nimbostratus
NimbostratusSSL Offloading -> Certificate Unknown
Hi,
We were able to implement SSL offloading but recently required even the next flow of traffic to be https. Here's the flow:
Client browse HTTPS: VIP(1st) --> SSL Offloading --> HTTP node...
Kevin_Stewart
Employee
EmployeeSSLv2 would be one of the problems, but also if you're requiring a client cert you MUST provide a CA bundle in the client SSL profile to be able to validate the client's certificate. It also appears in the ssldump that the client is failing the connection. Assuming it's because the server (F5) is sending a self-signed server cert, and the Java client has no way to validate it or allow you to continue.
