Forum Discussion

Bernard_9290's avatar
Bernard_9290
Icon for Nimbostratus rankNimbostratus
Jul 12, 2011

SSL::session invalidate issue

BIG-IP version:10.2.0 HF1     We have a virtual server with a client SSL profile configured for mutual authentication and we would like to invalidate the SSL session when the user logs out from ...
application delivery
dev
devops
iRules
Bernard_9290's avatar
Bernard_9290
Icon for Nimbostratus rankNimbostratus
Jul 14, 2011
Hi Aaron,

 

 

We have migrated yesterday from 10.2.0 HF1 to 10.2.2 to make sure we have all the latest fixes.

 

It looks like the cached SSL session is indeed made available accross all units. When navigating in the application, as we can see in the logs, distinct processors are sometimes used and the SSL session remains the same.

 

However the session invalidation seems only to invalidate the cached session at the "scope" of the processor that has executed the command.

 

 

We have now opened a case with F5 support.

 

 

Bernard