Forum Discussion

nobodyepic_2902's avatar
nobodyepic_2902
Icon for Nimbostratus rankNimbostratus
Dec 05, 2017

Client SSL authentication with mutlipe trusted CAs and CRLs

Hello,

 

we are using a client SSL profile with client authentication enabled. Now I need to add a second trusted CA and CRL. I created a second SSL profile with the new CA/CRL and tried to add it to the virtual server, but I receive following error: Virtual server xyz has more than one clientssl/serverssl profile with same server name. What would be the best way to accomplish this? Thanks in advance!

 

application delivery
BIG-IP
LTM
  • boneyard's avatar
    boneyard
    Icon for MVP rankMVP
    Dec 05, 2017

    combine both CA certificates into one certificate bundle (just copy paste the base64 info into one file / text field)

     

    for CRL it is more complicated you will have to merge those, which probably will require some scripting.

     

    btw: similar question with some options was asked here: https://devcentral.f5.com/questions/crl-verification-in-irule

     

    in the end you might consider setting up two virtual servers with different hostnames, will make your life easier for sure :)