Dell 3-DNS Spezifikationen PDF herunterladen (Seite 179)

Proxies

BIG-IP® Reference Guide 4-99

To insert fields of a client certificate using the

Configuration utility

1. In the navigation pane, click Proxies.

2. Click the Add button.

3. In the Insert Certificate box, check the appropriate check boxes.

4. Click Done.

To insert fields of a client certificate from the command

line

To insert headers for the fields of a client certificate into an HTTP request

using the command line, specify the client cert insert argument with the

bigpipe proxy command, as follows:

b proxy <ip>:<service> [clientssl] client cert insert

<([versionnum] [serial] [sigalg] [issuer] [validity] [subject]

[subpubkey] [whole] [hash])+ | disable>

Client session IDs

When adding an SSL proxy, you can configure the proxy to insert a client

SSL session ID header into an HTTP request.

The header that is inserted can be one of two types:

• A header in which the session ID is the session ID initially negotiated

with the client for the corresponding TCP connection. The proper format

of this header is SSLClientSessionID:X, where X represents the

hexidecimal representation of the SSL session ID that was initially

negotiated with the client for the corresponding TCP connection.

Certificate validity dates SSLClientCert: [before]

SSLClientCert: [after]

The validity dates for the certificate. The certificate

is not valid before or after the dates represented

by [before] and [after], respectively.

Certificate subject SSLClientCert: [subject] The subject of the certificate.

Public key of the

subject

SSLClientCert: [key] The type of public key type. The allowed types are

"RSA ([size] bit)", "DSA", or "Unkown public

key".

The certificate itself SSLClientCert: [cert] The actual client certificate.

MD5 hash of the

certificate

SSLClientCert: [hash] The MD5 hash of the client certificate.

Header Name Required Format Description

Table 4.18 Required formats of client certificate headers

1 2 ... 174 175 176 177 178 179 180 181 182 183 184 ... 425 426

Keine Kommentare

Dell 3-DNS Spezifikationen Seite 179