For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Maria_Carpinter's avatar
Maria_Carpinter
Icon for Nimbostratus rankNimbostratus
Oct 21, 2013

Authenticate clients with server certificate

We've configured a virtual server, with SSL Client profile, in order to authenticate clients with a corporative CA. This CA generates only server certificates, so it doesn't work.   When we try to...
application delivery
design
devops
iRules
Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Oct 21, 2013

Setting the client certificate authentication in the client SSL profile to "request" instead of "require" should work for you.

This setting should allow (client) server certificates to pass validation (ie. there is no validation), however it will also allow access without a certificate. To prevent that you may need an iRule like the following:

when CLIENTSSL_HANDSHAKE {
    if { [SSL::cert count] eq 0 } {
        reject
    }
}