Two way SSL problems with APM on BIGIP

The message you're describing generally relates to errors in the client certificate verification process. The next step, in my opinion, should be to manually verify that the client certificate(s) do actually validate against the given CA cert(s). Upload one of the client certificates to the F5 and use the OpenSSL verify command:

[http://www.openssl.org/docs/apps/verify.html](http://www.openssl.org/docs/apps/verify.html)

Example:

openssl verify -CAfile [CA certificate] [user certificate]