Forum Discussion

Spidey_29396's avatar
Spidey_29396
Icon for Nimbostratus rankNimbostratus
Feb 27, 2014

How to deploy client authentication(require) using F5's self-signed certificate

Hi All,   Is there any deployment guide using client authentication require. whenever i try to change the Client Certificate option to require, it doesn't work but if change to auto,request and no...
application delivery
availability
deployment
design
LTM
TMOS
Rafa_Ayala's avatar
Rafa_Ayala
Icon for Nimbostratus rankNimbostratus
May 29, 2015

use the solution : SOL14499

 

[root@asm03:Active:Standalone] exampleCA ls client1.crt client1.key client1.p12 client1.pem client1.req clientCA.crt clientCA.key clientCA.p12 clientCA.pem client2.crt

 

convert client key/cert pair to PKCS12 and send costumer the certificate: client1.p12

 

set in my ASM trusted certificate Autorities with the certificate : clientCA.crt

 

set in the profile ssl configuration :

 

wifi_host_test1 = client2.crt(self signed by my CA "clientCA-cert) <<<<<

 

Thank You

 

dragonflymr's avatar
dragonflymr
Icon for Cirrostratus rankCirrostratus
May 29, 2015
I assume that it started to work? I really missed "using F5's self-signed certificate" part of this post subject :-( I doubt it's possible to use self-signed cert as client cert - it breaks logic of certificate based authentication. Piotr