SSL Profiles Part 9: Server Authentication

This is the ninth article in a series of Tech Tips that highlight SSL Profiles on the BIG-IP LTM.  SSL Overview and Handshake SSL Certificates Certificate Chain Implementation Cipher Suites...
Updated Mar 25, 2023
Version 2.0
LTM
security
series-the-ssl-profile
ssl
tech tip
Marcus_Hong_Yu's avatar
Marcus_Hong_Yu
Icon for Nimbostratus rankNimbostratus
Apr 03, 2017

Hi John,

 

does it mean that once I select ignore option on server certificate, whatever I selected under Expire Certificate Response Control and Untrusted Certificate Response Control will not take effect? and the LTM will always use the Cert from the server and complete the SSL handshake?

 

for example, I select ignore under server certificate, but set both under Expire Certificate Response Control and Untrusted Certificate Response Control to be drop, what would LTM behave when it received an untrusted cert from the backend server?

 

sincerely Thanks