For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Jozsef_Soponyai's avatar
Jozsef_Soponyai
Icon for Nimbostratus rankNimbostratus
Jun 30, 2006

how to forward an optinional requested cleint cert in header

Hi Ladies & Gentlemen!     I am beginner with BigIp and has to solve the next problem.   The Client X.509 cert should be requested, and if existing it has to be forwarded via http to the bac...
application delivery
dev
devops
iRules
Jozsef_Soponyai's avatar
Jozsef_Soponyai
Icon for Nimbostratus rankNimbostratus
Jun 30, 2006
The problem is further reduced.

 

After succesfully received and verified the cleint cert,

 

a RENEGOTIATION of the connection will done !

 

 

See protocol extract :

 

: IN CLIENT_ACCEPTED

 

: IN CLIENT_ACCEPTED

 

: IN CLIENTSSL_HANDSHAKE; client cert verified ok

 

: IN CLIENT_ACCEPTED

 

: IN CLIENTSSL_HANDSHAKE; no client cert detected

 

So the cert can not be forwarded to the application:

 

: IN HTTP_REQUEST; client has NO cert, then NO HEADER; CN:=;

 

 

Please for hints, what can it be caused by.

 

Regards