Forum Discussion

Nitesh_Saxena_3's avatar
Nitesh_Saxena_3
Icon for Nimbostratus rankNimbostratus
Feb 05, 2019

Client Certificate Authentication

Hi,

 

We are trying to do a client authentication using certificate. we are trying to configure SSL Proxy which didnt work at all.

 

Our Requirement is that we need to have the client authentication using certificate directly through the F5 but we want to do HTTP Profile to get the x-forwarder-header so we can log the traffic of the user which is not currently happening.

 

  • They shouldn't be related. Assuming you have a client ssl profile configured for client cert auth (the client certificate should be set to "required") and you have a serverssl profile, you can insert the header.

     

    The correct header is called "X-Forwarded-For" though, maybe you're trying to log out the wrong header?

     

    • Nitesh_Saxena_3's avatar
      Nitesh_Saxena_3
      Icon for Nimbostratus rankNimbostratus

      Our main motive is to get source IP address through https traffic.

       

      I was reading we just need client profile to forward the client authentication to backend server and doesn't require server profile as well and enable x forward in http profile for the same to work.

       

      Please guide.

       

  • Did you try adding the XFF already? It inherits its properties from HTTP so you can add and test.