Forum Discussion

Jean_Mamène's avatar
Sep 16, 2019

Double authentication on a URL

Hello,

 

The access to the functionalities of the account manager is protected according to the following approach:

 

   Inbound flows are verified by the F5 in HTTPS / SSL authentication mode.

   If the stream is signed with the secret key corresponding to the certificate that protects the domain then the certificate is extracted to be reinjected (header: X-Client-Cert) in the HTTPS stream addressed to the java application.

   The application retrieves the certificate's cn and retrieves the ldap's rights using the cn to identify the correct account.

   The application renders the services corresponding to the rights.

 

To study the possibility of avoiding the break of service, is it possible to deploy in the F5, 2 certificates at the same time which is the same but different on the following points?

 

   expiration date

   private key

   secret key

   serial number

   ...

 

Is it possible that the 2 coexists in the F5. when the new certificate will be used, it will be accepted without action on our part?

and how should we do ?

 

Thank you

No RepliesBe the first to reply