i have imported .Pem formate certificate and key with same name

[admin@test:Active] ~ openssl s_client -host 172.20.51.93 -port 8443 CONNECTED(00000003) 11031:error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure:s23_clnt.c:596:

[admin@test:Active] ~ openssl s_client -host 172.20.51.80 -port 8443 CONNECTED(00000003) write:errno=104

[admin@test:Active] ~ openssl s_client -host 172.20.51.80 -port 8443 -cert /config/ssl/ssl.crt/SSL-Perminent.crt -key /config/ssl/ssl.key/SSL-Perminent.key CONNECTED(00000003) 12354:error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol:s23_clnt.c:601:

[admin@test:Active] ~ openssl s_client -connect 172.20.51.80:8443 -prexit CONNECTED(00000003)

[admin@test:Active] ~

Can you please provide more information about what you are trying to do? What software version you are using, and part of the configuration you are doing?

we want to do SSL on F5 rather then on Server so we have imported Certificate and Key on F5 in .PEM format, my latest comment is the result after successful import , because first time when i imported the key it was showing 0 bits and no errors, after doing last try now key is showing 2048 bits,

now the problem is that i am not able to create HTTPS monitor, if i write VIP:port in the browser i can go to the page of application but partitions are down as HTTPS monitor is not working i tried many times with different GET and receive values,

If you can guide me that what should i ask Application team to provide me to build Health Monitor.

Read these solutions:

https://support.f5.com/csp/article/K2167

https://support.f5.com/csp/article/K12531

My F5 is using 9.4.5 version 3400 model

On Telnet 172.20.51.80 8443

GET / HTTP/1.1 ENTER following i recieve

Well that is very old version, that is not supported for a long time.

The error you get form the telnet has nothing to do with the F5. Talk with application team, ask them how you can monitor the application, what HTTP version they use, and what URL you can use to monitor the server.

By the way, the port 8443 is not using SSL/TLS? If yes, your telnet is not going to work.

Based on your telnet, I'm pretty certain that the 8443 port is actually not doing SSL, try using a HTTP monitor instead and see if it marks it online.