Re: AW: [users@httpd] Client certificate auth behind f5 loadbalancer

2014-06-28 Thread Marco Pizzoli
Hi Marc, as F5 user maybe you are not yet aware that with F5, leveraging iRules, you can: - implement client cert verification/validation, also specifically checking the CN of the certificate - publish to the apache backend custom HTTP headers carrying informations extracted from the client certifi

Re: AW: [users@httpd] Client certificate auth behind f5 loadbalancer

2014-06-28 Thread Marc Schöchlin
Hi, On 06/26/2014 04:08 PM, andre.wen...@bmw.de wrote: > Why do you terminate the ssl on the F5 and not on the Apache-backend? We load > balance IP/Port-based on the F5 and terminate the SSL on the Apache backend, > so you would be able to turn on your SSLEngine and Proxy the SSL from the F5 >

AW: [users@httpd] Client certificate auth behind f5 loadbalancer

2014-06-26 Thread Andre.Wendel
Why do you terminate the ssl on the F5 and not on the Apache-backend? We load balance IP/Port-based on the F5 and terminate the SSL on the Apache backend, so you would be able to turn on your SSLEngine and Proxy the SSL from the F5 on the SSL Standard SSL Port 443 of the Apache and you can do ev