Forum Discussion
AwesomeNetwork1
Nimbostratus
Nimbostratuscapturing the CN from a X509 subject
I found irules for capturing the X509::subject, but I need to capture the CN and insert it into a http::header. It looks like I can do that with the subject. any idea on how (if possible) I can iso...
AwesomeNetwork1Nimbostratus
NimbostratusWill this code below assign a the cert CN to a value CN?
when CLIENTSSL_CLIENTCERT {
set debug 0 if {[SSL::cert 0] eq ""}{
reject } else {
set ssl_cert [SSL::cert 0]
set subject [X509::subject [SSL::cert 0]]} set subject_element [split subject ","] foreach value $subject_element { if {[string first "CN=" $value] >= 0}{ set CN [string range $value [expr {[string first "=" $value] +1}] end] break } } }
What would be my procedure to add the CN to a header?
Something like -
HTTP::header insert "es-security-runas-user=$CN"
Thanks for the help and the quick respons.
