For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

adiezma's avatar
adiezma
Icon for Nimbostratus rankNimbostratus
Feb 27, 2023

Verification of a certificate from a CA.

Hi All!, I need to migrate a virtual server from NGINX to F5 LTM and am not able to get it to work. It is a web that uses a certificate, which is validated with a CA that is already loaded from my ...
application delivery
adiezma's avatar
adiezma
Icon for Nimbostratus rankNimbostratus
Feb 28, 2023

The reason to use the irule is because we need to return a result when the certificate is invalid (not signed by the particular CA) or there is no certificate.

if {[SSL::cert count] > 0}{
if { [SSL::verify_result] == 0 }{
return
} else {
set error_string "error=error_cert"
}
} else {
set error_string "error=no_cert"
}
if { $error_string ne "" } {
HTTP::respond 303 Location https://s********?$error_string
}

Regards