Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

Forum Discussion

elpatronuno_269's avatar
elpatronuno_269
Icon for Nimbostratus rankNimbostratus
Oct 21, 2010

Forcing re-authentication of site with same browser instance & site

i have a challenge. For v9.4, Using irules to authenticate to a site with a certificate. Would like to force re-authentication with cert after logging out of site in the same browser instance (not c...
application delivery
dev
devops
irules
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Oct 21, 2010
Hi Brian,

 

 

I think you could use 'SSL::session invalidate' to remove the client's SSL session ID from LTM's cache, followed by SSL::renegotiate to request the client to re-authenticate with a client cert.

 

 

http://devcentral.f5.com/wiki/default.aspx/iRules/ssl__session

 

http://devcentral.f5.com/wiki/default.aspx/iRules/ssl__renegotiate

 

 

Aaron