For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

tom_jhuapl_2790's avatar
tom_jhuapl_2790
Icon for Nimbostratus rankNimbostratus
Jul 14, 2016

Remote OCSP and CRLDP server SSL cert checking

How do you establish an LTM virtual server with 2-way SSL and remote revocation checking on the server side of a virtual server? What is the LTM approach and the setup steps for server SSL cert checking using remote OCSP or CRLDP? Is it similar to setting up client SSL remote OCSP and CRLDP checking? I've found lots of documentation on client SSL but nothing helpful for the server side with respect revocation checking for 2-way SSL.

 

BIG-IP
LTM
security

1 Reply

  • boneyard's avatar
    boneyard
    Icon for MVP rankMVP
    Jul 16, 2016

    the server side is somewhat different, you are not receiving a client certificate but sending one (optionally) and receiving a server one.

     

    specially with bigip with you probably own the server then CA check and perhaps CN is enough.

     

    i did have a look at the client side ocsp and crldp stuff and if you go the irule route it seems possible to use the same commands but then in the server side events. sounds like a nice thing to try out.