Forum Discussion

Edgar_Palamarch's avatar
Edgar_Palamarch
Icon for Nimbostratus rankNimbostratus
Oct 14, 2015

Client Authentication Based On URI

Hello, Currently, to configure client authentication on a URI, we create 2 client SSL profiles (one of which is parent for the other) and 2 iRules that check a data group against the URI list. The ...
Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Oct 16, 2015

Does this iRule require the client cert configured for that /secureApi folder on the web servers then?

 

It does not. In fact you probably don't want to try to do client cert auth at the web servers at all.

 

Also, would this iRule work with a cert bundle configured for the Trusted Certificate Authorities option?

 

You absolutely need a Trusted Certificate Authorities bundle applied to the client SSL profile for mutual authentication to work. It won't be referenced until you actually renegotiate the SSL session and request a certificate from the client.

 

I have configured the client profile with one cert and am getting ERR_CONNECTION_RESET.

 

One cert? Are you talking about the certificate and private key selection in the top of the client SSL profile?