CAC authentication and http headers

Hi Mike,

 

 

If you want to send back an HTTP response even if the client doesn't present a cert when prompted, I think you'll need to set the cert mode to request when you call SSL::renogiate. Else, the client SSL profile might trigger a RST to the client if no cert is provided.

 

 

Can you add the client IP and port to the log statements and then post the example iRule with the log statements included to correlate the iRule code with the logging? Also, f you wrap the iRule text in [ code ] [/ code ] tags (without the spaces), the spacing of the rule will be preserved.

 

 

Aaron