Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

Forum Discussion

tatsu's avatar
tatsu
Icon for Nimbostratus rankNimbostratus
6 years ago

iRule for OSCP auth

Hi. I'm trying HTTPS traffic offload with client authentication using BIG-IP VE on AWS. And when Client Cert is expired or revoked, I want to show the user another web page. I am going to use...
irules
LTM
security
tatsu's avatar
tatsu
Icon for Nimbostratus rankNimbostratus
6 years ago

Thank you for your reply.

 

I configured "Client Certificate" required in client ssl profile, and then virtual server' authentication profile is set to "OCSP Prof".

 

 

 

 

 

 

 

 

In SSL Profile, I didn't add CRL object because I use OCSP Profile.

 

I can see packets(TCP 8181) on OCSP Responder Server.

It seems to that LTM use OCSP Responder for CLIENT AUTH.

 

Do I have to configure C3D?

 

Regards,