For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Mike_P_'s avatar
Mike_P_
Icon for Nimbostratus rankNimbostratus
Dec 07, 2017

Authenticate client certificate when it is already presented to F5 via header

I'm having an ongoing problem with a single client (all other users are fine) for a site that uses the following irule to request a client certificate and insert it via header if the clients ask for ...
BIG-IP
iRules
security
Lee_Sutcliffe's avatar
Lee_Sutcliffe
Icon for Nacreous rankNacreous
Dec 07, 2017

I've just been looking at a similar issue. Nothing is sent to the server as there is a condition to check for the certificate count 

if { [SSL::cert count] > 0 } {

I suspect that the result of the command is returning a zero as the certificate is likely only required once. Try changing the clientssl certificate to 

always
require the certificate, rather than once which is the default.