Forum Discussion
Erki_Märks_2779
Nimbostratus
NimbostratusSSLRequire
Is there a option like SSLRequire in apache for bigip?
I whould like to know if the following is possible in bigip
SSLRequire %{SSL_CLIENT_I_DN_O} eq "test"
12 Replies
Erki_Märks_2779yes, i know, i already posted my message to the support, but .... no answer yet- Erki_Märks_2779There is a workaround :
Update parent clientssl profile so that peer cert mode is request, and client cert ca to a file you want to set as a default client cert ca file, and Update.
Then Switch peer cert mode to ignore, then the client cert ca file will still remain in parent clientssl profile, will inherit.
