ADC

Configure SSL monitoring when client authentication is enabled on the backend service

August 20, 2024

Contributed by:

C C S

Consider a scenario in which you need to load balance servers that require SSL client certificates to validate clients. For this deployment, you need to create an SSL service on the Citrix ADC appliance, add an HTTPS monitor, add a certificate-key pair, bind this certificate-key pair to the SSL service, and then bind the https monitor to this service. You can use this https monitor to perform health checks on the backend services.

Configure SSL monitoring with client certificate

Open an SSH connection to the appliance by using an SSH client, such as PuTTY.
Log on the appliance by using the administrator credentials.

Add an SSL service. At the command prompt, type:

add service <name> <serverName> <serviceType> <port>
<!--NeedCopy-->

Add an https monitor. At the command prompt, type:
```
add lb monitor <name> <type>

```
Add the certificate-key pair that is going to be used as the client cert for that SSL service. At the command prompt, type:
```
add ssl certKey <certkeyName> -cert <string> -key <string>

```
Bind this certificate-key pair to the SSL service. At the command prompt, type:
```
bind ssl service <serviceName> -certkeyName <string>

```
Bind the https monitor to the SSL service. At the command prompt, type:
```
bind service <name> -monitorName <string>

```

Example:

add service ssl_svc 198.51.100.100 SSL 443
Done

add lb monitor ssl_mon HTTP
Done

add ssl certKey abccert -cert serverabc.pem -key serverabc.ky
Done

bind ssl service ssl_svc -certkeyName abccert
Done

bind service ssl_svc -monitorName ssl_mon
Done
<!--NeedCopy-->

The official version of this content is in English. Some of the Cloud Software Group documentation content is machine translated for your convenience only. Cloud Software Group has no control over machine-translated content, which may contain errors, inaccuracies or unsuitable language. No warranty of any kind, either expressed or implied, is made as to the accuracy, reliability, suitability, or correctness of any translations made from the English original into any other language, or that your Cloud Software Group product or service conforms to any machine translated content, and any warranty provided under the applicable end user license agreement or terms of service, or any other agreement with Cloud Software Group, that the product or service conforms with any documentation shall not apply to the extent that such documentation has been machine translated. Cloud Software Group will not be held responsible for any damage or issues that may arise from using machine-translated content.

Configure SSL monitoring when client authentication is enabled on the backend service

August 20, 2024

Contributed by:

C C S

August 20, 2024

Contributed by:

C C S

Configure SSL monitoring when client authentication is enabled on the backend service

Configure SSL monitoring with client certificate

In this article