Forum Discussion

Martin_Vlasko's avatar
Martin_Vlasko
Icon for Altocumulus rankAltocumulus
Aug 16, 2018

APM OCSP check via corporate proxy

Hi,   I am checking the revocation status of client certificates in APM using OCSP Auth Agent.   I have a AAA Server -> OCSP Responder configured with .   I have a host entry and static rout...
APM
corporate proxy ocsp
devops
ocsp
ocsp responder
proxy
Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Aug 21, 2018

Martin,

 

If you look at the previously-mentioned article (https://devcentral.f5.com/articles/ocsp-through-an-outbound-explicit-proxy-29026), you'll see that I've created TWO vips:

 

  • An internal VIP that points to the proxy server
  • An application VIP with an OCSP profile

The OCSP profile points to the internal VIP. So basically, OCSP requests flow through the internal VIP, and the iRules on that VIP rewrite the URL to an upstream explicit proxy.