Forum Discussion

_NAME_8's avatar
_NAME_8
Icon for Nimbostratus rankNimbostratus
Jan 05, 2016

Selective SSL client authentication with custom ca-bundle

I'm trying to setup a selective SSL client authentication for certain HTTP URIs using custom SSL profiles. The reason for custom profiles is because I couldn't find a way to specify a custom ca-bundl...
iRules
security
Amit_Grover_171's avatar
Amit_Grover_171
Icon for Nimbostratus rankNimbostratus
Jan 05, 2016

Hi GK,

 

Are you trying to use SSL client profile or SSL server profile because SSL client profile will share its(representing server) certificate to client and then client will match its CA in its CA bundle and then do authentication.

 

But if you are using SSL server profile, F5 will act as client and ask for server certificate and perform authentication by looking into its inbuilt CA-Bundle.

 

/Regards Amit Grover

 

  • _NAME_8's avatar
    _NAME_8
    Icon for Nimbostratus rankNimbostratus
    Jan 06, 2016
    I am a custom SSL Client (clientssl) profile.