Forum Discussion

Bhargav_9588's avatar
Bhargav_9588
Icon for Nimbostratus rankNimbostratus
May 07, 2007

Client Certificate Validity

Hi,

 

 

I had configured F5 to insert SSL Client Certiificate in HTTP Headers that mentioned in http://devcentral.f5.com/Default.aspx?tabid=53&forumid=5&view=topic&postid=13667.

 

 

Now I would like to add a Certificate Validity/Revocation check before inserting certificate into HTTP Headers. I don't want to insert certificate in http headers if it is expired or revoked by CA. Does anyone know how to do that check using CA CRL?

 

 

 

Thanks in advance

 

--

 

Bhargav
application delivery
dev
devops
iRules
  • Joe_Hagan_47074's avatar
    Joe_Hagan_47074
    Icon for Nimbostratus rankNimbostratus
    May 10, 2007
    Check out this sample

     

     

    http://devcentral.f5.com/wiki/default.aspx/iRules/InsertCertInServerHeaders.html

     

     

    The only question I have is how is the SSL session maintained. Is it suppose to end if the client closes the browser?
  • Bhargav_9588's avatar
    Bhargav_9588
    Icon for Nimbostratus rankNimbostratus
    May 10, 2007
    Thanks a lot. It worked.

     

     

    For your question, Yes it should end the session when client closes the browser.

     

     

    Currently, I set the timeout to 180.

     

     

    Thanks,

     

    Bhargav