Forum Discussion

Rob_Collings_26's avatar
Rob_Collings_26
Icon for Nimbostratus rankNimbostratus
Jun 28, 2016

Client Authentication

I have successfully set up my web application / virtual server to use SSL by creating a self signed certificate and using SSL Offloading. I now want to authenticate my clients by using a certificate. ie only browsers that have the certificate will be able to get to the site.

 

I've created a new self signed certificate for the client to present and set same Client SSL Profile to Require a client certificate. I then set the trusted certificate authority to the certificate I created.

 

When connecting to the site it now no longer works.

 

How does the client even know what certificate to present ? Can I do this with a single .crt on the client that I generated from the F5?

 

Any assistance is appreciated.

 

application delivery
BIG-IP
LTM

1 Reply

Sort By
  • Arnaud_Lemaire's avatar
    Arnaud_Lemaire
    Icon for Employee rankEmployee
    Jun 30, 2016

    In your client SSL profile, client authentication authentication sub menu you need to set :

     

    • require client certificate
    • trusted CA to match client cert against
    • Advertise CA to help the client pick the good one (not mandatory)

    if something is not working you can activate ssl debug log to have some info (system/logging menu then /var/log/ltm)