Forum Discussion
iF5_139120
Nimbostratus
NimbostratusSSL Hook command
Hello,
Is it possible to invalide a TLS browsing session? i.e. with client using chrome browser and a VIP configured on F5 with client certificate requirement will not ask for client certificate...
Kevin_Stewart
Employee
EmployeeYou can definitely invalidate an SSL session with the SSL::session invalidate command:
https://devcentral.f5.com/wiki/iRules.SSL__session.ashx
But getting the browser to actually prompt more than once is generally not something that can be controlled. Most browsers will remember the last selection and reselect the same certificate if the server requests it repeatedly.
