Forum Discussion
Martin_Vlasko
Altocumulus
AltocumulusAPM OCSP check via corporate proxy
Hi,
I am checking the revocation status of client certificates in APM using OCSP Auth Agent.
I have a AAA Server -> OCSP Responder configured with .
I have a host entry and static rout...
Kevin_Stewart
Employee
EmployeeMartin,
If you look at the previously-mentioned article (https://devcentral.f5.com/articles/ocsp-through-an-outbound-explicit-proxy-29026), you'll see that I've created TWO vips:
- An internal VIP that points to the proxy server
- An application VIP with an OCSP profile
The OCSP profile points to the internal VIP. So basically, OCSP requests flow through the internal VIP, and the iRules on that VIP rewrite the URL to an upstream explicit proxy.
