Forum Discussion
CirrostratusClient Authentication Certificate APM
Hi, I want to use APM for bypassing the SSL negotiations to pass to server but clients should see the server side certificate of F5 (this is not possible via proxy ssl feature). I am looking for client authentication certificates to be validated by backend server and not by F5. is it possible to use APM for such configuration?
1 Reply
- boneyard
MVP
so correct me if im wrong, you want the certificate on the F5 to be shown to the client and the client certificate passes to the pool member? that isn't possible, SSL offloading means the client certificate is lost there. you can pass it in header or such, but not the actual certificate as part of the SSL information.
if you need the client certificate at the poolmember isn't tcp load balancing an option, you do miss the ssl offloading then of course.
