Catch specific SSL errors/failures???

That looks like a good start Gavin. Can you try moving the ifile command to RULE_INIT and use subst to force evaluation of the variable?

 

 

Retrieve the HTML

 

set static::error_page [subst [ifile get error_page_html]]

 

 

Also, can you try editing your post and put the iRule in [ code ] [/ code ] blocks (without the spaces in the code tags) to preserve the line indentations in the iRule?

 

 

Nitass:

 

 

since it does not return 0, bigip should respond with 403, shouldn't it?

 

 

I'm not sure what [SSL::verify_result] returns if no SSL cert is present in the request or for the SSL session, so I was thinking it would be better to check for that before using any SSL commands.

 

 

Thanks, Aaron