Client SSL Certificate Validation

This article explains the application profiles and PKI profile configurations.

Avi Load Balancer validates SSL certificates presented by clients against a trusted certificate authority (CA) and a configured certificate revocation list (CRL). Certificate information is passed to the server through various headers through additional options. For certificate authentication, an HTTP application profile, and an associated public key infrastructure (PKI) profile have to be configured.