Forum Discussion

Miguel_111028's avatar
Miguel_111028
Icon for Nimbostratus rankNimbostratus
Oct 23, 2008

Inserting SSL client certificate into the header of the HTTP session

Hello group,     I do not have much experience in creating iRules and I need to set an iRule to an https virtual server type with client certificate authentication. The iRule should do the...
application delivery
dev
devops
iRules
hooleylist's avatar
hooleylist
Icon for Cirrostratus rankCirrostratus
Oct 14, 2009
Hi zafer,

 

 

Can you create a new post which details what your current VIP, client SSL and pool configurations are, what the client sees when trying to connect to the virtual server and ideally analysis of tcpdumps of a failure? If you need help capturing or analyzing the tcpdumps, you can check these solutions:

 

 

SOL411: Overview of packet tracing with the tcpdump utility

 

https://support.f5.com/kb/en-us/solutions/public/0000/400/sol411.html

 

 

SOL1893: Packet trace analysis

 

https://support.f5.com/kb/en-us/solutions/public/1000/800/sol1893.html

 

 

To list the VIP, client SSL profile and pool config, you can use 'b virtual VIP_NAME list', ' b profile clientssl CLIENTSSL_PROFILE_NAME list all' and 'b pool POOL_NAME list'.

 

 

Can you also clarify whether the IIS server requires a client certificate?

 

 

Aaron