F5 is upgrading its customer support chat feature on My.F5.com. Chat support will be unavailable from 6am-10am PST on 1/20/26. Refer to K000159584 for details.

Forum Discussion

awan_m's avatar
awan_m
Icon for Cirrostratus rankCirrostratus
Jan 21, 2025

client ssl profile update for issuer presented

Hi - my clients are using multiple certificate issuers so i need to apply ssl profile depending on the client certificate issuer. if i use the ssl::profile command in rule - it can only be applied ...
announcement
zamroni777's avatar
zamroni777
Icon for MVP rankMVP
Jan 21, 2025

server's request for client certificate happens after client hello and server hello.
so it's not possible to switch ssl profile after client sends certificate.

you can try workaround using http redirect to https vserver that uses intended ssl profile.

How To Configure BIG-IP Part 8 - Client Authentication