Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

SSL Profiles Part 1: Handshakes

This is the first in a series of tech tips on the F5 BIG-IP LTM SSL profiles.  SSL Overview and Handshake SSL Certificates Certificate Chain Implementation Cipher Suites SSL Options SSL...
Updated Mar 24, 2023
Version 2.0
LTM
security
series-the-ssl-profile
ssl
tech tip
JRahm's avatar
Icon for Admin rankAdmin
Christ Follower, Husband, Father, Technologist. I love community and I especially love THIS community. My background is networking, but I've dabbled in all the F5 iStuff, I'm a recovering Perl guy, and am very much a python enthusiast. Learning alongside all of you in this accelerating industry toward modern apps and architectures.
View Profile
jaked_150553's avatar
jaked_150553
Icon for Nimbostratus rankNimbostratus
Apr 15, 2014
I have a question.... in the case where both client and server ssl profiles are enabled, do we need a certificate in the server ssl profile?

 

how does encryption/decryption happen in the following scenarios?

 

 

1- there is no certificate in server ssl profile, there is certificate on the server

 

2 - there is certificate in server ssl profile, there is certificate on the server, both the certificates are same

 

3 - there is certificate in server ssl profile, there is certificate on the server, both certificates are different.