For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Rob_Wismans_179's avatar
Rob_Wismans_179
Icon for Nimbostratus rankNimbostratus
Feb 22, 2018

Bypass Client Certificate authentication

Hello,   I have an existing working irule that handles client authentication.   The Client SSL Profile is set to request a client certificate.   My question: How to bypass this existing cli...
application delivery
iRules
LTM
Rob_Wismans_179's avatar
Rob_Wismans_179
Icon for Nimbostratus rankNimbostratus
Feb 22, 2018
when HTTP_REQUEST {
    if { $reject } {
        if { $static::debug == 2  } { log local0. "CIP: Client certificate rejected (DN: $cert_subject)" }
        HTTP::respond 200 content {
                    
                        
                            Denied
                        
                        
                    Your client is denied access.
                        
                    
        }
        TCP::close
        reject
    }

    if {$auth ne ""} {
        if { $static::debug == 2  } { log local0. "CIP: Adding Authorization: Basic $auth" }
        HTTP::header remove "Authorization"
        HTTP::header insert "Authorization" "Basic $auth"

    }
}