Forum Discussion

Vishwanath's avatar
Vishwanath
Icon for Nimbostratus rankNimbostratus
Apr 27, 2016

Server-ssl profile

I have a VIP configured with both client-ssl and server-ssl. Certify on ltm is fine whereas certificate on server expired. Still VIP is working fine. I have a question y I am not getting any warning or error or it is a default feature of vip of ignoring the error?

 

Can we change the settings, if yes then where? so that i should get a warning?

 

BIG-IP
big-ip ltm
devops
LTM

4 Replies

Sort By
  • Yann_Desmarest's avatar
    Yann_Desmarest
    Icon for Cirrus rankCirrus
    Apr 27, 2016

    Hello,

     

    It's not by design. But you can configure server authentication on the sslserver profile and use "Expire Certificate Response Control" and "Untrusted Certificate Response Control" options

     

  • Yann_Desmarest_'s avatar
    Yann_Desmarest_
    Icon for Nacreous rankNacreous
    Apr 27, 2016

    Hello,

     

    It's not by design. But you can configure server authentication on the sslserver profile and use "Expire Certificate Response Control" and "Untrusted Certificate Response Control" options

     

    • Yann_Desmarest_'s avatar
      Yann_Desmarest_
      Icon for Nacreous rankNacreous
      Apr 27, 2016
      Maybe you can try to play with an irule and Server side SSL events together with the following command : https://clouddocs.f5.com/api/irules/SSL__verify_result.html