Forum Discussion

Erki_Märks_2779's avatar
Erki_Märks_2779
Icon for Nimbostratus rankNimbostratus
Aug 01, 2008

SSLRequire

Is there a option like SSLRequire in apache for bigip?

 

 

I whould like to know if the following is possible in bigip

 

 

SSLRequire %{SSL_CLIENT_I_DN_O} eq "test"

12 Replies

  • There is a workaround :

     

    Update parent clientssl profile so that peer cert mode is request, and client cert ca to a file you want to set as a default client cert ca file, and Update.

     

    Then Switch peer cert mode to ignore, then the client cert ca file will still remain in parent clientssl profile, will inherit.