Forum Discussion
NimbostratusLog https request with used tls client certificate
Hello,
we are using a F5 LTM as SSL-Offloader with authentication using tls client certificates.
Now I want to log every https request to a defined virtual server with source ip address AND the cn / name of the client certificate.
I found under https://devcentral.f5.com/questions/logging-the-request-coming-to-a-virtual-server?rc=1 a solution to log the request and ip address, but without the used client certificate.
Can anyone help me?
Kind regards
Bjoern
Boggs_5738you can look at ltm policies and when creating a rule, a logging option is available to use tcl commands. similar on how you do it on irules.
anyway. these devcentral articles might be useful for your purpose - credit to the original authors.
https://devcentral.f5.com/wiki/iRules.ClientCertificateCNChecking.ashx https://devcentral.f5.com/questions/create-custom-client-certificate-authentication-with-irule