Forum Discussion

Bernard_9290's avatar
Bernard_9290
Icon for Nimbostratus rankNimbostratus
Jul 12, 2011

SSL::session invalidate issue

BIG-IP version:10.2.0 HF1     We have a virtual server with a client SSL profile configured for mutual authentication and we would like to invalidate the SSL session when the user logs out from ...
application delivery
dev
devops
iRules
hooleylist's avatar
hooleylist
Icon for Cirrostratus rankCirrostratus
Jul 12, 2011
Hi Bernard,

 

 

I've used SSL::session invalidate in CLIENTSSL_CLIENTCERT successfully, but not tried it in HTTP_REQUEST. The wiki page shows an example in HTTP_REQUEST though.

 

 

What do you see if you log [SSL::sessionid] after calling SSL::session invalidate and HTTP::redirect?

 

 

If this isn't working for you, you could open a case with F5 Support. Make it clear in the case request that you're not looking for them to write an iRule for you--just test why an existing iRule isn't working as expected.

 

 

Aaron