Forum Discussion
jondyke_46152
Jan 24, 2011Nimbostratus
pass through client certificate irule
I am currenlty using the irule below for performing SSL passthrough on traffic. Is there any way I could midify this irule so that it only passed through SSL traffic that has a client certificate at...
hooleylist
Feb 08, 2011Cirrostratus
If there is a client certificate attached re-encrypt the traffic with a server SSL profile and send through to the servers (with the original client certificate included)
This part isn't possible, as LTM doesn't have the private key for the client certificate. Typically in this scenario, people will use an iRule to insert details for the client cert that was presented on the clientside connection into an HTTP header for the server to parse and validate. This potentially requires changing the web app to parse the HTTP header(s) instead of the actual client cert.
Aaron
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects