Unknown CA error for VIP that is doing SSL offloading on LTM

I did some tests. Let's say we have:

Well known Root Ca

Intermediate CA1 Intermediate CA2 Cert issued by CA2 My setup is:

Chain file containing certificates:

CA2 CA1 Root CA Then in clientssl I have:

Certificate and key - one issued for VS FQDN Chain - one described above As result client is receiving in Server Hello both site certificate and certificates from chain file - everything is working OK.

Conclusion - check your Chain file, something has to be wrong here.

Check this article for steps to test your chain file SSL Profiles Part 3: Certificate Chain Implementation

Hope it helps

Piotr