Forum Discussion

Shawn_Salyers_8's avatar
Shawn_Salyers_8
Icon for Nimbostratus rankNimbostratus
Dec 16, 2010

Client Certificate Help Needed!!!!

I have been searching the forums and have not been able to find an iRule example that I am able to get working. Simply put, I need to require a client certificate and allow access based on the thumbp...
application delivery
dev
devops
iRules
hooleylist's avatar
hooleylist
Icon for Cirrostratus rankCirrostratus
Dec 17, 2010
This example is something you could start with:

 

 

http://devcentral.f5.com/wiki/default.aspx/iRules/ClientCertificateCNChecking.html

 

 

You could add logic to one of those examples, which after validating the client cert, adds the client's ssl ssession ID to the session table:

 

 

http://devcentral.f5.com/wiki/default.aspx/iRules/session

 

 

That way you could support SSL session resumption in the client SSL profile and only check the cert once per session.

 

 

Aaron