Forum Discussion

JG_373381's avatar
JG_373381
Icon for Nimbostratus rankNimbostratus
Oct 04, 2018

2 Way SSL for one pool only

Greetings all, I met with F5 one week ago, so I am totally newbie, but i want to get rid of our apache https proxy, but I don't know how. My apache proxy handles 8 proxy balancer with many membe...
devops
iRules
Andy_McGrath's avatar
Andy_McGrath
Icon for Cumulonimbus rankCumulonimbus
Oct 04, 2018

The apache proxy SSLVerifyClient is used to enable SSL Mutual Authentication or two-way SSL authentication. On F5 LTM this is done within an 

SSL Client Profile
under the 
Client Authentication
section.

As a minimum set the 

Client Certificate
option to 
require
and set the 
Trusted Certificate Authorities
to the CA Root Certificate (which you will need to upload to the F5 device) within the SSL Client Profile you are using on the Virtual Server.

For more details see the following:

K15137: Configuring two-way SSL authentication to the Configuration utility

DevCentral: SSL Profiles Part 8: Client Authentication