Forum Discussion
How to deploy client authentication(require) using F5's self-signed certificate
Hi ,
In the sol : https://support.f5.com/kb/en-us/solutions/public/14000/400/sol14499.html
To create the Client SSL profile, use the following command syntax: create /ltm profile client-ssl ca-file client-cert-ca cert key peer-cert-mode require
For example, to create a new Client SSL Profile sample-clientssl by using the client certificate client1-cert, the client key client1-key, require client certificate mode, and the trusted CA and Advertised Certificate Authorities is clientCA-cert, type the following command: create /ltm profile client-ssl sample-clientssl ca-file clientCA-cert.crt client-cert-ca clientCA-cert.crt cert site-cert.crt key site-key.key peer-cert-mode require
What are these certificates? ( site-cert.crt key site-key.key )
Thank you
- dragonflymrMay 27, 2015
Cirrostratus
Hi, Those are your web server cert and key used for standard SSL Handshake by server to which client is connecting. So the ones you have to set for clientssl profile without client authentication. I GUI you are setting those for clientssl profile in Configuration section - Certificate and Key fields. Piotr
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com