Forum Discussion
PSD2 client cert check and passthrough Subject DN
I have been asked to implement a client cert check with external CA's and if the check passes then pass through the client cert Subject DN to the backend application for checking and action by application.
I am an F5 newbie but from my reading I don't want to have to create a certificate bundle on the device as it will need updated as the CA's change.
Any help about how this can be done quickly would be appreciated. I have a pentest scheduled and I want to do a cert check fail and pass
Thanks
Richard
- Simon_BlakelyEmployee
> I have been asked to implement a client cert check with external CA's and if the check passes then pass through the client cert Subject DN to the backend application for checking and action by application.
You need to use the Client Certificate Constrained Delegation (C3D) feature:
K72668381: Overview of the SSL Client Certificate Constrained Delegation feature
K14065425: Configuring Client Certificate Constrained Delegation (C3D)
Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com