Forum Discussion

Erki_Märks_2779's avatar
Erki_Märks_2779
Icon for Nimbostratus rankNimbostratus
Aug 01, 2008

SSLRequire

Is there a option like SSLRequire in apache for bigip?     I whould like to know if the following is possible in bigip     SSLRequire %{SSL_CLIENT_I_DN_O} eq "test"
application delivery
dev
devops
iRules
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Aug 07, 2008
It looks like you're trying to validate that the client's cert was generated from a specific server cert/key. Here is a previous user's post on how he validated the client cert and handled requests without a cert (Click here).

 

 

You could add a check of the issuer using X509::issuer (Click here).

 

 

Aaron