For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

zafer's avatar
zafer
Icon for Nimbostratus rankNimbostratus
Oct 14, 2009

Client Certificate authentication

Hello     our IIS used Client authentication certificate based.   We want to SSL offload on bigip and support client authentication with bigip     i have two vip 192.168.1.6...
application delivery
dev
devops
iRules
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Jun 11, 2010
If you use 9.4.8HF3 or HF4, you can use HTTP::respond to send a response from CLIENTSSL_HANDSHAKE:

 

 

CR125264 - HTTP::respond should be allowed in CLIENTSSL_HANDSHAKE

 

 

Also I wouldn't suggest using a global variable for this as the value will be trampled by all other connections.

 

 

Aaron