Forum Discussion

Chris_Phillips's avatar
Chris_Phillips
Icon for Nimbostratus rankNimbostratus
Oct 25, 2007

passing ssl cert through on de&recrypt

hi,

 

 

is there any way to relay the end server's ssl certificate to a client if we're decrpyting and the reencrypting an ssl connection? rather than having to import it into the F5 each time, i'd like to just require a cert under a serverssl profile and bounce it on to the client.

 

 

Cheers

 

 

Chris
config
design
  • hoolio's avatar
    hoolio
    Icon for Cirrostratus rankCirrostratus
    Oct 25, 2007
    I don't think there is any way to use an iRule (or iControl?) to dynamically change a client SSL profile to use the cert a server presents--particularly if you consider that the client side connection needs to be established before a server side connection is built.

     

     

    Aaron
  • Chris_Phillips's avatar
    Chris_Phillips
    Icon for Nimbostratus rankNimbostratus
    Oct 25, 2007
    hmm, i wasn't sure at what stage the server side connection would be opened. i'm mixing this up with oneconnect stuff as well so there would be a serverside connection open usually already. not that it would have already been assigned to that incoming client connection i guess.