For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

awan_m's avatar
awan_m
Icon for Cirrostratus rankCirrostratus
Jan 22, 2025

client ssl profile update for issuer presented

Hi - my clients are using multiple certificate issuers so i need to apply ssl profile depending on the client certificate issuer. if i use the ssl::profile command in rule - it can only be applied ...
announcement
zamroni777's avatar
zamroni777
Icon for MVP rankMVP
Jan 22, 2025

server's request for client certificate happens after client hello and server hello.
so it's not possible to switch ssl profile after client sends certificate.

you can try workaround using http redirect to https vserver that uses intended ssl profile.

How To Configure BIG-IP Part 8 - Client Authentication