Forum Discussion
irig4u_152672
Nimbostratus
NimbostratusSSL Handshake failure / Verify irule
I'm trying to Troubleshoot the below Issue.
Application sends an certificate to the LTM (it is set up on https URL to send certificate to ltm to authenticate itself has valid), the below irule is ...
What_Lies_Bene1
Cirrostratus
CirrostratusHmmm, I'm not sure about your logic here. What do you want to do? I'm guessing here;
- CLIENTSSL_HANDSHAKE: If the client presents a cert, log the fact and proceed. If no cert, proceed.
- HTTP_REQUEST: If a specific URI is requested, check a cert was presented. If not, force renegotiation. If so, proceed.
- HTTP_REQUEST_SEND: Use clientside context, insert SSL certificate used as a header.
Not sure why you are using HTTP::collect/release.
Why force renegotiation? If the client didn't present a certificate first time, why would this help?
