Bug ID 1125381: Extraneous warnings recorded in when using only intermediate certificates

Last Modified: Mar 30, 2024

Affected Product(s):
BIG-IP LTM(all modules)

Known Affected Versions:
17.1.0, 16.1.2.2

Opened: Jul 11, 2022

Severity: 3-Major

Symptoms

When client authentication is enabled on the client SSL profile but the trusted-ca file includes only an intermediate certificate and no CA root cert to build the whole cert chain, although the TLS connection is made, as expected, there is an error message reported.

Impact

Although the TLS handshake succeeds without any issue and the connection is processed, as expected, a confusing warning is reported.

Conditions

Trusted-ca includes only inter-cert and no root CA-cert is configured.

Workaround

Because the connection is made, you can safely ignore this message. Note: This issue does not occur if the root CA cert is also configured in the CA-cert bundle.

Fix Information

None

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips