Forum Discussion
Erki_Märks_2779
Nimbostratus
NimbostratusSSLRequire
Is there a option like SSLRequire in apache for bigip?
I whould like to know if the following is possible in bigip
SSLRequire %{SSL_CLIENT_I_DN_O} eq "test"
hoolio
Cirrostratus
CirrostratusSorry, I guess I misinterpreted the SSLRequire definition. If the option changes which certs are displayed, I'm guessing this is something that would need to be configured in the client SSL profile on the VIP. I think you can add a import a CA certificate and configure that on the client SSL profile as the trusted clients CA (Click here). You could also try configuring this cert as the advertised cert authority (Click here).
I haven't tested these options much. If they don't work, you could try opening a case with support or replying here.
Aaron
