Re: AW: [users@httpd] Client certificate auth behind f5 loadbalancer

2014-06-28 Thread Marco Pizzoli
Hi Marc, as F5 user maybe you are not yet aware that with F5, leveraging iRules, you can: - implement client cert verification/validation, also specifically checking the CN of the certificate - publish to the apache backend custom HTTP headers carrying informations extracted from the client certifi

Re: [users@httpd] Windows Apache 2.4.9 restarts itself

2014-06-28 Thread Jeff Trawick
On Fri, Jun 27, 2014 at 7:53 AM, Jeff Trawick wrote: > On Thu, Jun 26, 2014 at 4:18 AM, Mar Imp wrote: > >> Hi, >> >> Thank you for the response! >> >> I looked into child.c, and see that the first line in Error log: >> (OS 6)The handle is invalid. : AH00356: Child: WAIT_FAILED -- >> shutting d

Re: AW: [users@httpd] Client certificate auth behind f5 loadbalancer

2014-06-28 Thread Marc Schöchlin
Hi, On 06/26/2014 04:08 PM, andre.wen...@bmw.de wrote: > Why do you terminate the ssl on the F5 and not on the Apache-backend? We load > balance IP/Port-based on the F5 and terminate the SSL on the Apache backend, > so you would be able to turn on your SSLEngine and Proxy the SSL from the F5 >