For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

MikeRobinson_64's avatar
MikeRobinson_64
Icon for Nimbostratus rankNimbostratus
Dec 01, 2009

auth_result not called for some client certificates

Hi everyone,     I am trying to resolve an issue with an irule that is utilized to ask for client certificates for certain folders. The irule works great except for certain client certific...
application delivery
dev
devops
iRules
MikeRobinson_64's avatar
MikeRobinson_64
Icon for Nimbostratus rankNimbostratus
Dec 03, 2009
Ok, got it. Here are the scrubbed results (shows one good attempt and two bad attempts):

 

 

Dec 3 10:28:16 tmm tmm[1864]: Rule irule_CAC_Required : BAD.BAD.BAD.BAD:29757: New TCP connection

 

Dec 3 10:28:17 tmm tmm[1864]: Rule irule_CAC_Required : BAD.BAD.BAD.BAD:29757: Cert count: 0

 

Dec 3 10:28:29 tmm tmm[1864]: Rule irule_CAC_Required : BAD.BAD.BAD.BAD:29757: SessionID: db87c438a301cd28544bab28d0ded00e525d8725a9

 

05020f04ab0c072ab2ea5c, SSL verify result: unable to get local issuer certificate. Holding SSL handshake.

 

Dec 3 10:28:29 tmm tmm[1864]: Rule irule_CAC_Required : BAD.BAD.BAD.BAD:29757: SessionID: db87c438a301cd28544bab28d0ded00e525d8725a9

 

05020f04ab0c072ab2ea5c, SSL verify result: unable to get local issuer certificate. Holding SSL handshake.

 

Dec 3 10:29:05 tmm tmm[1864]: Rule irule_CAC_Required : GOOD.GOOD.GOOD.GOOD:30711: New TCP connection

 

Dec 3 10:29:05 tmm tmm[1864]: Rule irule_CAC_Required : GOOD.GOOD.GOOD.GOOD:30711: Cert count: 0

 

Dec 3 10:29:06 tmm tmm[1864]: Rule irule_CAC_Required : GOOD.GOOD.GOOD.GOOD:30711: SessionID: db87c438a301aa6f544bab28d0dedff4525d8725a

 

905020f04ab0c072ab2ea26, SSL verify result: ok. Holding SSL handshake.

 

Dec 3 10:29:06 tmm tmm[1864]: Rule irule_CAC_Required : GOOD.GOOD.GOOD.GOOD:30711: Cert count: 2

 

Dec 3 10:29:06 tmm tmm[1864]: Rule irule_CAC_Required : GOOD.GOOD.GOOD.GOOD:30711: Cert0 subject: CN=XXXXXX.XXXXXXX.XXXXXX.XXXXXXXX,OU=

 

USA,OU=PKI,OU=DoD,O=U.S. Government,C=US. Releasing HTTP.

 

Dec 3 10:30:24 tmm tmm[1864]: Rule irule_CAC_Required : BAD.BAD.BAD.BAD:32433: New TCP connection

 

Dec 3 10:30:24 tmm tmm[1864]: Rule irule_CAC_Required : BAD.BAD.BAD.BAD:32433: Cert count: 0

 

Dec 3 10:30:35 tmm tmm[1864]: Rule irule_CAC_Required : BAD.BAD.BAD.BAD:32433: SessionID: db87c438a301ccd5544bab28d0dedf38525d8725a9

 

05020f04ab0c072ab2ead3, SSL verify result: unable to get local issuer certificate. Holding SSL handshake.

 

 

Any idea on what to do with the error presented?

 

 

Mike