Forum Discussion

fraguet_53463's avatar
fraguet_53463
Icon for Nimbostratus rankNimbostratus
Feb 22, 2018

Modify SSL Sign Hash in SSL client profile or change SSL client profile before renegociate.

Hi   I have a VS with a SSL Client Profile. This SSL client profile is configured with a SSL Sign Hash value at "SHA1" and client authentication.   If the SSL negotiation results in no certific...
application delivery
iRules
LTM
Daniel_Varela's avatar
Daniel_Varela
Icon for Employee rankEmployee
Feb 23, 2018

I think you should be able to use SSL::profile out of the client_accepted event. I assume you check for the certificate in clientssl_clientcert, if there is no client cert then change the SSL::profile there, flags it with a variable and on the HTTP_REQUEST event use the SSL::renegotiate. That should force the renegotiation using the second SSL profile.