Forum Discussion

AwesomeNetwork1's avatar
AwesomeNetwork1
Icon for Nimbostratus rankNimbostratus
Aug 31, 2017

capturing the CN from a X509 subject

I found irules for capturing the X509::subject, but I need to capture the CN and insert it into a http::header. It looks like I can do that with the subject. any idea on how (if possible) I can iso...
application delivery
iRules
Stanislas_Piro2's avatar
Stanislas_Piro2
Icon for Cumulonimbus rankCumulonimbus
Sep 05, 2017

Hi,

 

use this code:

 

when CLIENTSSL_CLIENTCERT {
  set debug 0
    if {[SSL::cert 0] eq ""}{
        reject 
    } else { 
        set ssl_cert [SSL::cert 0]  
        set subject [X509::subject [SSL::cert 0]]}
        array set subject_fields [split $subject ",="]
    }
}

when HTTP_REQUEST {
    if {[info exists subject_fields(CN)]} {
        HTTP::header insert "username" $subject_fields(CN)
    }
}