Forum Discussion

IK13_38276's avatar
IK13_38276
Icon for Nimbostratus rankNimbostratus
Jun 18, 2010

Handling Client Certificates

Hi guys,     Please excuse me if I'm posting to the wrong forum, and I'd appreciate if you point me in the right direction.     We want to employ client certificates in addition to our a...
config
design
David_Holmes_12's avatar
David_Holmes_12
Historic F5 Account
Oct 01, 2015

Can't believe I'm replying to such an ancient thread but the landscape has changed...

 

F5 now sports a mode called "ProxySSL" where it uses the same key+cert that the back-end server uses. You can then use this mode to let the client authenticate all the way to the back-end server. There is also a special sub-mode called "ProxySSL Passthrough".

 

There is also a mode called "SplitSSL" which is similar and may also do what you need.

 

  • Brad_Parker's avatar
    Brad_Parker
    Icon for Cirrus rankCirrus
    Oct 01, 2015
    Problem though it can't support Forward Secrecy....