Client Certificate Authentication

Hi Sojan,

 

 

In SSL, the server (LTM in this case) can specify the CA issuer cert(s) that it will accept but not tell the client to provide a specific certificate. For LTM, you can select one or more CA certs to send to the client in the SSL handshake using the client SSL profile's trusted CA bundle setting. Within an iRule, you can check for the attributes and either reject the handshake, send an HTTP response, etc if the client cert isn't considered valid.

 

 

sol10167: Overview of the Client SSL profile

 

https://support.f5.com/kb/en-us/solutions/public/10000/100/sol10167.html

 

 

Aaron