iRule machine cert auth

[jsilvestre1]

Hi,

I know that it is possible to check the common name, fingerprint, etc. from a client certificate, meaning a certificate assigned to a user.

I was wondering if it is possible to do the same but instead use a machine certificate, and if so, could anyone give me some guidance?

Thanks in advance to everyone!

[whisperer]

This would be a use case for F5 APM. The only think you can do effectively otherwise would be to check SSL client certificate. This you could do within the client SSL profile and attaching that to the VS.