For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

nobodyepic_2902's avatar
nobodyepic_2902
Icon for Nimbostratus rankNimbostratus
Dec 05, 2017

Client SSL authentication with mutlipe trusted CAs and CRLs

Hello,   we are using a client SSL profile with client authentication enabled. Now I need to add a second trusted CA and CRL. I created a second SSL profile with the new CA/CRL and tried to add it...
application delivery
BIG-IP
LTM
boneyard's avatar
boneyard
Icon for MVP rankMVP
Dec 05, 2017

combine both CA certificates into one certificate bundle (just copy paste the base64 info into one file / text field)

 

for CRL it is more complicated you will have to merge those, which probably will require some scripting.

 

btw: similar question with some options was asked here: https://devcentral.f5.com/questions/crl-verification-in-irule

 

in the end you might consider setting up two virtual servers with different hostnames, will make your life easier for sure :)