Forum Discussion
Erki_Märks_2779
Nimbostratus
NimbostratusSSLRequire
Is there a option like SSLRequire in apache for bigip?
I whould like to know if the following is possible in bigip
SSLRequire %{SSL_CLIENT_I_DN_O} eq "test"
Erki_Märks_2779Nimbostratus
NimbostratusThere is a workaround :
Update parent clientssl profile so that peer cert mode is request, and client cert ca to a file you want to set as a default client cert ca file, and Update.
Then Switch peer cert mode to ignore, then the client cert ca file will still remain in parent clientssl profile, will inherit.
