Forum Discussion

tatsu's avatar
tatsu
Icon for Nimbostratus rankNimbostratus
Oct 23, 2019

iRule for OSCP auth

Hi. I'm trying HTTPS traffic offload with client authentication using BIG-IP VE on AWS. And when Client Cert is expired or revoked, I want to show the user another web page. I am going to use...
iRules
LTM
security
tatsu's avatar
tatsu
Icon for Nimbostratus rankNimbostratus
Oct 28, 2019

Thank you for your reply.

 

I configured "Client Certificate" required in client ssl profile, and then virtual server' authentication profile is set to "OCSP Prof".

 

 

 

 

 

 

 

 

In SSL Profile, I didn't add CRL object because I use OCSP Profile.

 

I can see packets(TCP 8181) on OCSP Responder Server.

It seems to that LTM use OCSP Responder for CLIENT AUTH.

 

Do I have to configure C3D?

 

Regards,