Forum Discussion

icherif_189553's avatar
icherif_189553
Icon for Nimbostratus rankNimbostratus
Mar 14, 2016

[F5 LTM 11.4.1 HF9][2-Way-auth] CLIENTSSL_CLIENTCERT is not triggered in the Irule

Hello all, I am trying to implement an Irule to filter CN names. below the irule : when RULE_INIT { set static::org "O=OPS" log local0.alert "RULE_INIT" } when CLIENTSSL_CLIENTCERT { ...
application delivery
clientssl_clientcert
irule
iRules
LTM
ssl
tls
icherif_189553's avatar
icherif_189553
Icon for Nimbostratus rankNimbostratus
Mar 15, 2016
I have also some errors in /var/log/ltm: Mar 15 10:52:53 PRI001 debug tmm1[11489]: 01260009:7: Connection error: ssl_shim_vfycerterr:3166: application verification failure (42) Mar 15 10:52:53 PRI001 info tmm1[11489]: 01260013:6: SSL Handshake failed for TCP from 10.10.10.52:59419 to 172.172.172.170:82 Mar 15 10:53:49 PRI001 debug tmm1[11489]: 01260009:7: Connection error: ssl_shim_vfycerterr:3166: application verification failure (42) Mar 15 10:53:49 PRI001 info tmm1[11489]: 01260013:6: SSL Handshake failed for TCP from 10.10.10.52:59455 to 172.172.172.170:82