Forum Discussion
chic_cat_324145
Altocumulus
AltocumulusSSL Proxy
Hello,
I have multiple puppet masters behind f5 and would like to offload ssl on F5 and encrypt it again and pass to backend server.
I created:
a) client ssl profile (uploaded cert + private key from...
This helped. Thanks everyone, I finally made it work!
chic_cat_324145Altocumulus
AltocumulusOne more question, Let's say a client doesn't have a cert signed with CA, in this model F5 would throw an error (unauth).
In fact CA is behind F5, is there a way to allow cert requests to flow through F5 without auth through the same VIP and port?
Thanks
- Kevin_Stewart
Employee
You can set the certification auth option to 'request' vs. 'require'. It'll prompt for a cert, but still let clients through if they don't present a cert.
