Forum Discussion
atoth
Cirrus
May 07, 2019Is it possible to do both 1 way AND 2 way SSL on a single VIP?
So I have a requirement to set up a vip for 2way SSL. The client connects to the site and the site serves the page. This should be simple. However, once the client connects to the site, the site d...
Vinit_Ajgaonkar
Nimbostratus
May 07, 2019Hi Atoth,
Modifying the client authentication in the SSL profile can allow for the VIP to be configured as both 1-way and 2-way.
However from a security standpoint it kind of nullifies the Cert based authentication becuase even users who dont pass the auth check can get through.
Client authentication options in ClientSSL profile are as below: 1. Require(Strict and requires client cert authentication) 2. Request(Not strict for client cert authentication for the ssl session to be established) 3. Ignore(Default)
Regards, Vinit
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects