Forum Discussion
Erki_Märks_2779
Nimbostratus
Aug 01, 2008SSLRequire
Is there a option like SSLRequire in apache for bigip?
I whould like to know if the following is possible in bigip
SSLRequire %{SSL_CLIENT_I_DN_O} eq "test"
Erki_Märks_2779
Nimbostratus
Aug 30, 2008I can turn on "Advertised Certificate Authorities" from the client ssl profile but can I do this in an Irule? The support couldnt answer that. I also cant change the ssl profile from "when HTTP_REQUEST", and i don't know the URI in "when CLIENT_ACCEPTED"
So how to turn on Advertised Certificate Authorities option here
if { $uri starts_with "/idauth" } {
HTTP::collect
SSL::authenticate always
SSL::authenticate depth 3
SSL::cert mode require
SSL::renegotiate
}
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects