For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

psor_73734's avatar
psor_73734
Icon for Nimbostratus rankNimbostratus
Aug 18, 2009

client certificate authentication for a particular directory

Hi     I need to use client certificate authentication for a particular directory, for example:     on     https://demo.com (no authentication needed)   https://d...
config
design
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Aug 19, 2009
It would be good to upgrade to the latest 9.4.x version, 9.4.7 as there have been a number of important fixes since 9.4.4. For OCSP validation of the client cert, there is a default OCSP verification iRule provided. You can reference that for ideas to start with. Once I have a working version I can post that as well.

 

 

You may also want to change the cert mode from require to request so you can gracefully handle client requests which don't include a cert.

 

 

Aaron