Forum Discussion

tatsu's avatar
tatsu
Icon for Nimbostratus rankNimbostratus
Oct 23, 2019

iRule for OSCP auth

Hi. I'm trying HTTPS traffic offload with client authentication using BIG-IP VE on AWS. And when Client Cert is expired or revoked, I want to show the user another web page. I am going to use...
iRules
LTM
security
Yoann_Le_Corvi1's avatar
Yoann_Le_Corvi1
Icon for Cumulonimbus rankCumulonimbus
Oct 25, 2019

Hi,

Yes that would be if the F5 actually interrogated the OCSP. But I don't think it does.

Did you configure clientssl profile to "require" client certificate, and add a CRL object there ? With LTM, only CRL will be able to be checked by default, unless you use C3D.

 

Yoann