Forum Discussion

Nimbostratus

Feb 28, 2021

Proxy SSL and rejecting unwanted Client Authentication

Morning I have a server configure for mTLS and I would like to be able to inspect the Client Certificate presented and reject if some criteria matches, preferably via Proxy SSL. However from w...

Employee

Mar 01, 2021

The method for passing through Client Certificates to the backend server is called C3D https://support.f5.com/csp/article/K14065425

NIrving
Nimbostratus
Mar 02, 2021
Thanks Pete. I discovered this last night and manages to get it working in my lab. It's not ideal as it rewrites certificates and I need to work out if it can pass through our extension requirements, but it is looking promising. Once I figure out how to upvote will make this the answer and thanks for your time in replying

Forum Discussion

Proxy SSL and rejecting unwanted Client Authentication

Recent Discussions

Chrome V 124+ on MacOS - Virtual Server Access Issue

F5 Rseries HA

Need advise to setup a policy on F5

F5 Rseries R2600 Tenant sizing

Can iRule mask the payload content on event logs of security

Related Content

F5 BIG-IP Access Policy Manager (APM) - Google Authenticator and Microsoft Authenticator

API Security Strategy - Discover and map APIs, block unwanted connection and prevent data leakage

Doing mTLS Authentication per URL

Distributed caching of authentication requests with NGINX Ingress Controller

Application Programming Interface (API) Authentication types simplified