Forum Discussion

Song_chi_woon_2's avatar
Song_chi_woon_2
Icon for Nimbostratus rankNimbostratus
Sep 24, 2006

About Cookie encryption

Hi

 

I want to know encoded level of COOKIE to BIGIP6400 equipment.

 

When attempted server’s ssl call by web server in Test pc,I want to know encoded level of Cookie in TestPC

 

I want to confirm encoded method of cookie in BIGIP using Irule in BIGIP.

 

I want to know establishment option to cookie name and so on in iRULE establishment (Cookie encryption) city.

 

Ask help.

 

application delivery
dev
devops
iRules
  • hoolio's avatar
    hoolio
    Icon for Cirrostratus rankCirrostratus
    Sep 25, 2006
    Hi,

    I don't believe there is a stock way to have BIG-IP encrypt cookies without using an iRule. To use an iRule, see this example from unRuleY:

    Click here

    The example uses AES to perform the en/decryption. For more info on AES check here:

    Click here

    I believe you can use 128, 192 or 256 bit keys using the format:

    
[AES::key 256]

    The wiki page on AES doesn't indicate you need to specify a key length (Click here) but TMM seems to expect it:

    Test rule on 9.2.3:

    
log local0. "key: [AES::key]"

    TMM error:

    Sep 25 12:54:43 tmm tmm[21152]: 01220001:3: TCL error: Rule log_aes_key_rule - wrong args: should be "AES::key <128 | 192 | 256>" while executing "AES::key"

    It worked when I tested [AES::key 256].

    Hope this gets you started...

    Aaron