For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

WCP_183386's avatar
WCP_183386
Icon for Nimbostratus rankNimbostratus
Jan 20, 2015

F5 to Jboss

I'd like to use F5 to loadbalance over some Jboss servers (no httpds), also terminating mutually-authenticated SSL at the F5.   How do I get the client's certificate subject name into Jboss to ch...
application delivery
deployment
LTM
security
boneyard's avatar
boneyard
Icon for MVP rankMVP
Jan 20, 2015

yes the F5 can do both, Brad explained the checking client cert against CA. the other part you would do with an iRule, if you search for checking certificate subject or something like that you will find many posts about it.

 

something like this: https://devcentral.f5.com/wiki/iRules.ClientCertificateCNChecking.ashx

 

if you want the descission logic on your Jboss environment you could also just add the subject in a header and send it with the request to the Jboss server.

 

still think about what Brad is saying, is there really a chance someone with a valid cert will miss use this service? if not, why the extra check.