For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

mlanghorst's avatar
mlanghorst
Icon for Nimbostratus rankNimbostratus
Apr 04, 2023

APM On-Demand cert auth failing for curl command line client

Had a requirement for a site that was moving from Apache with ACL's over to F5 in front of an Apache instance, that only requires a user certificate authentication for a specific /uri.  For the SSL p...
application delivery
Juergen_Mang's avatar
Juergen_Mang
Icon for MVP rankMVP
Apr 05, 2023

Try to enable clientless-mode for APM. Without this APM responses with a redirect to establish a session.

mlanghorst's avatar
mlanghorst
Icon for Nimbostratus rankNimbostratus
Apr 05, 2023

Should've mentioned that.  I've tried setting that header via curl -H 'Clientless-Mode: 1'.  and within the irule:

#Set clientless mode for API
HTTP::header insert "clientless-mode" 1

Setting verbose, I see I'm getting a 302 redirect.  If I add the -L switch, I get returned the my.policy page telling me I've been denied access.