Forum Discussion
spurushothaman_
Nimbostratus
Dec 04, 2015Client Certificate is not passing through back end hosts
I have SSL terminated at F5, we have client certificate for client authentication coming via application request. The client certificate is not passed through the back end systems hence it is reject...
Kevin_Stewart
Employee
Dec 05, 2015is this not a use case for Proxy SSL feature?
It is indeed, but a) you didn't mention ProxySSL in your original question, and b) ProxySSL comes with some pretty significant caveats.
As with any SSL "man-in-the-middle"-type solution, ProxySSL requires knowledge of the server's private key and an RSA-based key exchange between the client and server. This last requirement is proving harder to achieve as the industry moves away from non-perfect forward secret cryptography.
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects
