Forum Discussion
tatsu
Nimbostratus
NimbostratusiRule for OSCP auth
Hi. I'm trying HTTPS traffic offload with client authentication using BIG-IP VE on AWS. And when Client Cert is expired or revoked, I want to show the user another web page. I am going to use...
Yoann_Le_Corvi1
Cumulonimbus
CumulonimbusHi,
Yes that would be if the F5 actually interrogated the OCSP. But I don't think it does.
Did you configure clientssl profile to "require" client certificate, and add a CRL object there ? With LTM, only CRL will be able to be checked by default, unless you use C3D.
Yoann
