Forum Discussion

jibarri's avatar
jibarri
Icon for Nimbostratus rankNimbostratus
Apr 10, 2019

How does the default serverssl work in Server SSL profile

When the default serverssl is added to the server SSL profile under VIP and the custom client SSL cert is added to the Client SSL profile of the VIP, if the backend server in the pool is configured to validate the certificate presented by the F5, would LTM present any certificate ? if yes, which certificate would that be?

 

application delivery
BIG-IP

1 Reply

Sort By
  • gsharri's avatar
    gsharri
    Icon for Altostratus rankAltostratus
    Apr 10, 2019

    The serverssl profile causes bigip to behave as a client when setting up the ssl session so no certificate is required unless you wish to perform mutual authentication with the pool members. The pool members need cert/keys so bigip serverssl can negotiate the ssl session.