Forum Discussion
insert client cert http header into ssl handshake
In a LTM environment taking in HTTP traffic with a client certificate contained in an http header would it be possible for an irule to grab the header contents and insert ther client certificate into an SSL handshake with a backend pool?
Is it possible to do any manipulation within the CLIENTSSL_HANDSHAKE or CLIENTSSL_CLIENTCERT events?
Thanks!
- Since client side certificate uniquely identifies the user so that it cannot be impersonated (the user signs the message with its private key), it is impossible to impersonate that user i.e. LTM cannot use the certificate in a handshake with a server.
You can keep the information in the header and send it to the server either encrypted or not but as a regular HTTPS request and not as a client side certificate request.
Thanks,
Tom.
