Forum Discussion

AwesomeNetwork1's avatar
AwesomeNetwork1
Icon for Nimbostratus rankNimbostratus
Aug 31, 2017

capturing the CN from a X509 subject

I found irules for capturing the X509::subject, but I need to capture the CN and insert it into a http::header. It looks like I can do that with the subject. any idea on how (if possible) I can iso...
application delivery
iRules
AwesomeNetwork1's avatar
AwesomeNetwork1
Icon for Nimbostratus rankNimbostratus
Sep 05, 2017

Will this code below assign a the cert CN to a value CN?

 

when CLIENTSSL_CLIENTCERT {

 

set debug 0 if {[SSL::cert 0] eq ""}{

 

reject } else {

 

set ssl_cert [SSL::cert 0]

 

set subject [X509::subject [SSL::cert 0]]} set subject_element [split subject ","] foreach value $subject_element { if {[string first "CN=" $value] >= 0}{ set CN [string range $value [expr {[string first "=" $value] +1}] end] break } } }

 

What would be my procedure to add the CN to a header?

 

Something like -

 

HTTP::header insert "es-security-runas-user=$CN"

 

Thanks for the help and the quick respons.