Forum Discussion

Jeff_Morrison_4's avatar
Jeff_Morrison_4
Icon for Nimbostratus rankNimbostratus
Jan 06, 2006

Client SSL pass to back end servers

I have the F5 configured to do client side ssl. I want to know how or can I send the client ssl to our back end web servers so the web servers can verify if it is the correct cert for its web site and not another client cert we have issued?

 

 

Would you do this with a iRule or other method?

 

 

Thanks for the assistances!
  • Colin_Walker_12's avatar
    Colin_Walker_12
    Historic F5 Account
    You would do this in an iRule by inserting the cert into a custom header in the packet, and configuring the webservers to look for this header.

     

     

    The command you'd be using would be X509::whole . You can read more about this, and other iRules commands here:

     

     

    Click here

     

     

    HTH,

     

    -Colin