Forum Discussion

Antoine_80417's avatar
Antoine_80417
Icon for Nimbostratus rankNimbostratus
Apr 13, 2011

Multiple certificate authorities and authentication profiles

Hello,     This is my first post on this forum so first, let me introduce myself : I'm a network an security engineer, I work for a company that uses quite a lot of F5 appliances as GTMs, LCs or...
config
design
Antoine_80417's avatar
Antoine_80417
Icon for Nimbostratus rankNimbostratus
Apr 14, 2011
Hello Michael,

 

 

You cannont apply more than one SSL profile per Virtual Server so that's why I have to create a bundle of all the trusted CA I want to advertise. The advertisement of the CA bundle I created is working fine, we are struggling on the verification of the certificate that the client is sending. Because we have to manage different CA, we will have different CRL files so we need to find a way to match the certificate issuer to a specific CRL authentication profile.

 

 

We only want to accept certificates signed by partners CA, so we do not wish to advertise the ca-bundle that is available by default.