Forum Discussion

Amitabha_118500's avatar
Amitabha_118500
Icon for Nimbostratus rankNimbostratus
Jul 24, 2014

SSL Termination troubleshooting

Hello Experts, This is the first time I am configuring SSL termination and getting page cannot be displayed.   The SSL cert is on the server. It work when we use standard profile without SSL termi...
application delivery
deployment
devops
iRules
LTM
Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Jul 24, 2014

Okay, just to be clear:

  1. Standard VIP
  2. HTTP profile
  3. Client SSL profile with cert and key exported from the server
  4. Server SSL profile (the generic serverssl profile)

  5. A pool

  6. And it works without the SSL profiles and HTTP profile, correct?

Does the back end server require a client cert?

The first thing I'd do is take a look at the LTM log for any SSL-related errors. YOu may also want to try the serverssl-insecure-compatible profile and see if that makes a difference. If that doesn't work, you'll probably want to try an SSLDUMP capture on either side of the proxy:

ssldump -k [path to private key] -AdNn -i 0.0 port 443 [and additional filters]

Any SSL errors should show up in these captures.