For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

zafer's avatar
zafer
Icon for Nimbostratus rankNimbostratus
Oct 14, 2009

Client Certificate authentication

Hello     our IIS used Client authentication certificate based.   We want to SSL offload on bigip and support client authentication with bigip     i have two vip 192.168.1.6...
application delivery
dev
devops
iRules
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Oct 15, 2009
Hi Zafer,

 

 

If the same client cert/key is working on a browser then it's most likely the LTM server SSL profile configuration that is the problem. Can you print out the actual serverssl profile using 'b profile serverssl PROFILE_NAME list all'? You can change the names of certs, etc to keep it anonymous.

 

 

Also, the LTM log file is limited in size. I'd guess the cert is longer than the max log entry size.

 

 

Aaron