Forum Discussion

Nimbostratus

16 years ago

Handling Client Certificates

Hi guys, Please excuse me if I'm posting to the wrong forum, and I'd appreciate if you point me in the right direction. We want to employ client certificates in addition to our a...

config

design

David_Holmes_12

Historic F5 Account

10 years ago

Can't believe I'm replying to such an ancient thread but the landscape has changed...

F5 now sports a mode called "ProxySSL" where it uses the same key+cert that the back-end server uses. You can then use this mode to let the client authenticate all the way to the back-end server. There is also a special sub-mode called "ProxySSL Passthrough".

There is also a mode called "SplitSSL" which is similar and may also do what you need.