Forum Discussion

elpatronuno_269's avatar
elpatronuno_269
Icon for Nimbostratus rankNimbostratus
Oct 22, 2010

Forcing re-authentication of site with same browser instance & site

i have a challenge. For v9.4, Using irules to authenticate to a site with a certificate. Would like to force re-authentication with cert after logging out of site in the same browser instance (not c...
application delivery
dev
devops
iRules
hooleylist's avatar
hooleylist
Icon for Cirrostratus rankCirrostratus
Oct 22, 2010
Hi Brian,

 

 

I think you could use 'SSL::session invalidate' to remove the client's SSL session ID from LTM's cache, followed by SSL::renegotiate to request the client to re-authenticate with a client cert.

 

 

http://devcentral.f5.com/wiki/default.aspx/iRules/ssl__session

 

http://devcentral.f5.com/wiki/default.aspx/iRules/ssl__renegotiate

 

 

Aaron