For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

IRONMAN's avatar
IRONMAN
Icon for Cirrostratus rankCirrostratus
May 10, 2017

Why we CRL? OCSP?

I am wondering, Why we check client certificate using CRL? or OCSP? Since i am holding the Public Certicate and private ket in my f5 box? Client are just accessing my website? How client certific...
application delivery
LTM
Secure Web Gateway
security
Leonardo_Souza's avatar
Leonardo_Souza
Icon for Cirrocumulus rankCirrocumulus
May 10, 2017

You just use that to check if the certificate still valid or not. If you are not doing client authentication, there is nothing to check.

 

Check this articles, as it has diagrams showing the different types of SSL handshake.

 

https://devcentral.f5.com/articles/ssl-profiles-part-1

 

On the other hand, the client itself (most likely a browser), will use some kind of validation to check that the certificate still valid, can be one of those methods or not.