Forum Discussion

Jeff_Morrison_4's avatar
Jeff_Morrison_4
Icon for Nimbostratus rankNimbostratus
Aug 14, 2006

Passing SSL cert to back end servers

We will be doing two way SSL on the F5. That is once our clinets accept our ssl cert, they will also require us to present their ssl client cert which I have installed. The question here is:

 

 

How do I then send their SSL cert to my web serves that are part of a POOL?

 

 

Thanks,

 

Jeff

3 Replies

  • Colin_Walker_12's avatar
    Colin_Walker_12
    Historic F5 Account
    This forum is intended for discussion regarding iRules, not general product support.

     

     

    I would say, however, that if you're looking to re-encrypt data on the back end of the connection, you'll want to start playing with Server SSL Profiles. As to which cert to send the servers, that's up to you.

     

     

    Colin
  • Thanks Colin,

     

     

    The traffic between the F5 and the backend servers is not encrypted. What I need to do is pass the clients ssl cert to the backend server.
  • Colin_Walker_12's avatar
    Colin_Walker_12
    Historic F5 Account
    Well, you could certainly insert the contents of the cert back into an HTTP header and pass it along with the request to the back end servers and have them pull out the information. I know there are a couple good examples of that here in the forums.

     

     

    Colin