For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Jason_Witt_4207's avatar
Jason_Witt_4207
Historic F5 Account
Oct 24, 2005

iRule to require SSL Client Certs for a URI

Working on developing a Rule based on the SSL Client Cert for URI in Docs and Tips. We first tried the rule verbatim with the exception of changing the URI to match what they wanted to protect. This...
application delivery
dev
devops
iRules
Steve_Brockman_'s avatar
Steve_Brockman_
Icon for Nimbostratus rankNimbostratus
Jul 12, 2008
Hi,

 

I tried this iRule just now and it partially worked. My dilemma is that I need the "advertised certificate authorities" set as well when I require certificates. Otherwise, I need "ignore" (which is the default in the profile, and the "cert ca" value gets blanked out)

 

 

I saw another post on how to do this, and it appeared that SSL::cert commands do not support this yet. Does anyone know if this feature has been added yet?

 

 

Thanks,

 

Steve