For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Adrien_Legros_1's avatar
Adrien_Legros_1
Icon for Altostratus rankAltostratus
Jan 21, 2010

Change SSLClient profile based on URI

Hello,     we have a groupe of application under the same hostname but with different URIs. Some applications require a client authentication with a certificate but others are public appli...
application delivery
dev
devops
iRules
Adrien_Legros_1's avatar
Adrien_Legros_1
Icon for Altostratus rankAltostratus
Jan 25, 2010
Hello, thanks for your help, I think I have an Irule that works more or less like I'd like too. One question more

 

Here is the way I perform the ssl enhancement to ask the certificate but I do not know How the F5 choose the trusted CA as I did not configured it in the ssl profile (not needed for weak applications). How can I configure it to be sure it will choose the good one.

 

 

HTTP::collect

 

SSL::authenticate always

 

SSL::authenticate depth 9

 

SSL::cert mode require

 

SSL::renegotiate

 

no command for the trusted CA list ????