Forum Discussion

TMH's avatar
TMH
Icon for Nimbostratus rankNimbostratus
Mar 10, 2023

SSL offloading with port 8443

Hallo,  I need help to configure SSL offloading with port 8443 , i have configured a VS https with port 8443 and pool members that listen to port 8443 , i want to configure SSL certificate but no lu...
application delivery
security
TMH's avatar
TMH
Icon for Nimbostratus rankNimbostratus

I have already created ssl certificate and signed with CA lets say for example ABCD CA server, and then created a ssl client profile and still not working , i used to go over the previous steps with SSL offloading for virtual server 443 and its working , is there a specific options for SSL client profile for 8443 ? because when i check the certificate in the URL https://abcd:8443 the certificate shows (Local Host ) same as before a assigne the SSL Client Profile !! its like the SSL profile not really effect the virtual server certificate .

 

Paulius's avatar
Paulius
Icon for MVP rankMVP
Mar 10, 2023

TMH In order to provide additional detail on why this isn't working it would be helpful to see the configuration of the virtual server and SSL client profile that is assigned to the virtual server. Purely based on the screenshot it seems like the SSL client profile being used doesn't have the trusted CA certificate in it.

  • TMH's avatar
    TMH
    Icon for Nimbostratus rankNimbostratus
    Mar 10, 2023

     

    Paulius 

    What i had configured with virtual server :

    Name:xxxx

    Type:Standard

    Source:0.0.0.0.

    Destination:x.x.x.x

    Port:Other 8443

    Protocol:TCP

    Protocol Profile(client):Tcp

    Protocol Profile (Server):use client profile

    SSL profile client: (name of profile ssl 8443)

    SSL profile server:None

    All the other options is none.

    Default Persistence Profile:source_add

    Fallback Persistence Profile:none

    And for SSL client Profile:

    Certificate key chain: i added the certificate and key and chain that I already imported in certificate list.

    correct me if there's something wrong or missing .

    • Paulius's avatar
      Paulius
      Icon for MVP rankMVP
      Mar 10, 2023

      TMH Based on the description and without being able to see which cert and key pair are being used I would say this is configured correctly and should work. If you are still having issues you might take a QKVIEW and upload it to iHealth to see if anything pops up on that.