OCSP w/ requested client certifications.

And what piece of data in the client request would you use to make that determination? If you can't determine which profile to use before connecting to the server, then you have to use a default profile to connect, at which point it's too late to force a require or ignore.

 

Nothing in the client request. I'm not looking to change the way that the SSL session is handled, but the OCSP authentication needs to be conditional depending on whether client certificates are present or not.

 

 

I was hoping for a system-provided variable, similar to how you can write iRules based on the number of available nodes in a pool.