For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Scot_86001's avatar
Scot_86001
Icon for Nimbostratus rankNimbostratus
Feb 21, 2010

iRule Optimization w/ Certificates?

The iRule below functions and performs as it should. I have been told that what I have below may not be efficient or optimized. I am looking to see if anyone can make some suggestions on how to bett...
application delivery
dev
devops
iRules
Scot_86001's avatar
Scot_86001
Icon for Nimbostratus rankNimbostratus
Feb 25, 2010
Aaron,

 

I think we has an issue/bug. It appears as though the second responder is not being checked (based on status returned). What is happening is that the ECA cert is being tried on the DoD responder (apparently the responders are choosen in alpha order). It is making a successful connection but returned an error of unknown certificate. As a result, ECA responder is not being tried.

 

 

Is there a way for me to test the cert being presented and then denote which responder to send it too?

 

Is there a way, if a status of unknown is returned, to initiate the second responder? somehow change the status as if the first was not reachable?

 

 

It appears to me as though the multiple responder concept is for multiple IP's of the same type cert.

 

 

You seem to be the top resource for this type of stuff. Any ideas?