For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

arjen_kuindersm's avatar
arjen_kuindersm
Icon for Nimbostratus rankNimbostratus
May 26, 2014

Passing client SSL certificate to server / f5 LTM 11.5

Hi, I'm trying to pass the SSL client certificate to the backend server: Traffic should flow like: Client --> (SSL) --> f5 --> (SSL) --> windows 2012 server. From the forums it should be very e...
application delivery
deployment
devops
iRules
LTM
security
arjen_kuindersm's avatar
arjen_kuindersm
Icon for Nimbostratus rankNimbostratus
May 26, 2014

When I use the ssldump command I also see the full certificate. So that probably means the part that prints the header doesn't work properly and set me on the wrong track. However, the server doesn't accept the client certificate. Is there a way to compare the exact headers between client<>f5 and f5<>webserver? I would like to compare them, I see a lot of examples with alternatives to 'X-ENV-SSL_CLIENT_CERTIFICATE'...

 

I will have a look at the proxy-ssl. Didn't investigate this feature yet.