Forum Discussion
RiverFish
Jun 04, 2014Altostratus
Turn off client auth if uri equals
Customers connect to one IP. They connect with an app, not a browser. They use port 5443 to register (obtain a cert we issue) for the service, and port 443 for the actual service.
register: https:/...
Kevin_Davies_40
Nacreous
Just brainstorming here.... you will have to use a less secure profile until they come in then change the profile and force a SSL::renegotiate if they are not using /register. Something like...
when HTTP_REQUEST {
if {!([HTTP::uri] eq "/register")} {
SSL::profile ssl_2way
SSL::renegotiate
}
}
But this will make normal connections take longer to establish as a result because its a two step process for them instead of one.
Kevin_Davies_40
Jun 17, 2014Nacreous
This assumes your application is sending HTTP traffic.
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects