For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

justin_westover's avatar
justin_westover
Icon for Nimbostratus rankNimbostratus
Sep 08, 2016

OCSP Responders and Configuration Profiles

We're performing client mutual authentication on a few of our sites and we want to verify that the cert being presented by the client hasn't been revoked. We're using OCSP profiles to do this but we'...
application delivery
BIG-IP
LTM
security
Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Sep 10, 2016

The certificate issuer field (a DN) should be unique across the various issuing CAs. You just have to find some attribute of that DN you can use to build your conditions. The first thing you should do is grab a sample of each and compare them.