Forum Discussion
smiley_dba_1116
Sep 27, 2011Nimbostratus
ACA+CRLDP=iRules?
Thanks, smiley
- Michael_YatesNimbostratusHi Smiley,
when CLIENTSSL_CLIENTCERT { if { [SSL::cert count] == 0 } { log local0. "No Certificate Provided" drop } else { log local0. "Certificate 1: [X509::serial_number [SSL::cert 0]]" log local0. "Certificate 2: [X509::serial_number [SSL::cert 1]]" log local0. "Client Certificate Recieved - IP:[IP::client_addr] Serial:[X509::serial_number [SSL::cert 0]]" if { [class match [X509::serial_number [SSL::cert 0]] equals ValidCertificates] } { log local0. "Client Accepted - IP:[IP::client_addr] Serial:[X509::serial_number [SSL::cert 0]]" } else { log local0. "Client Rejected -IP:[IP::client_addr] Serial:[X509::serial_number [SSL::cert 0]]" reject } } }
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects